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ABSTRACT 


The  purpose  of  this  report  is  to  give  a  quantitative  evaluation  of 
the  improvement  in  reliability  which  can  be  achieved  in  a  digital  system 
by  the  use  of  redundancy  and  restoring  organs . 

Three  measures  of  reliability  are  considered: 

1.  The  probability  of  system  survival  P(T)  for  a  given  mission 
time  T. 

2.  The  mean  time  to  failure  for  the  system;  MTF  =  I  P(t)  dt. 

*'0 

3.  The  useful  life  T^  of  the  system.  T  is  defined  as  the 
maximum  mission  time  for  which  P(t)  >  i-A. 

Two  types  of  restoring  organs,  majority  vote  takers  and  adaptive 
vote  takers  are  considered. 

For  the  case  of  majority  vote  takers  simple  expressions  have  been 
developed  for  the  approximate  relationships  between  the  amount  of 
redundancy,  the  number  of  vote  takers,  and  the  corresponding  improvement 
in  system  reliability.  The  analysis  includes  the  case  of  redundant 
nonperfect  vote  takers,  and  the  optimum  number  of  imperfect  vote  takers 
(of  known  reliability)  to  be  used  in  any  system  has  been  established. 

For  the  case  of  perfect  vote  takers  in  a  highly  redundant  system, 
we  find  that  the  system  MTF  and  T^  increase  almost  proportionally 
with  the  number  of  vote  takers  employed.  The  expressions  developed  in 
the  text  can  readily  be  used  to  evaluate  the  trade-off  between  the  amount 
of  redundancy  and  the  number  of  vote  takers  required  to  achieve  a 
desired  improvement  in  reliability. 

Furthermore,  we  have  investigated  the  improvement  in  reliability 
which  can  be  achieved  by  using  adaptive  vote  takers  as  the  restoring 
organ . 

For  systems  of  redundancy  higher  than  three  the  adaptive  vote 
taker  is  a  more  efficient  restoring  organ  than  the  majority  vote  taker. 
However,  we  find  that  the  reliability  which  can  be  achieved  in  a  redundant 
system  by  using  a  given  number  of  adaptive  vote  takers  can  often  be 
equalled  or  exceeded  by  using  about  10  times  as  many  majority  vote  takers. 
At  the  present  time,  there  is  no  simple  technique  for  realizing  adaptive 
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vote  takers,  whereas  majority  vote  takers  with  up  to  about  9  inputs  are 
relatively  easy  to  implement.  Thus,  for  the  time  being  the  use  of 
majority  vote  takers  appears  more  practical  than  the  use  of  adaptive 
vote  takers. 

It  is  concluded  that  while  the  use  of  redundancy  and  restoring 
organs  can  substantially  increase  the  MTF  of  a  digital  system,  the 
technique  is  much  more  effective  in  increasing  the  useful  life  T. 

(for  A«  l)  of  a  system.  Thus,  this  technique  will  be  most  useful 
in  the  case  of  a  system  that  must  operate  with  an  exceedingly  small 
probability  of  failure  for  a  relatively  short  period  of  time. 
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EXPLANATION  OF  SYMBOLS 


P, p  the  probability  that  a  system  or  a  circuit  is 

operating  properly,  p  is  used  for  individual  cir¬ 
cuits  and  for  single-stage  systems.  P  is  used  for 
systems  containing  m  stages,  where  m  usually  is 
greater  than  one.  Whenever  we  want  to  emphasize  that 
P  depends  on  time,  we  will  write  P(t).  A  set  of 
subscripts  on  P  or  p  is  used  to  distinguish 
between  various  cases  as  is  indicated  in  detail 
below. 

Q, q  the  probability  that  a  circuit  or  a  system  has 

failed.  (Once  a  circuit  has  failed,  it  is  assumed 
to  remain  inoperative.)  The  same  comments  as  stated 
above  for  P  apply  to  Q. 

n  each  majority  group  contains  (2n+l)  identical 

circuits . 

m  the  number  of  stages  contained  in  a  system  using 

majority  vote  takers  (also  the  number  of  nonredundant 
majority  vote  takers) 

m  the  number  of  stages  in  a  system  using  adaptive  vote 

takers 

the  optimum  number  of  stages  for  a  system  using 
redundant  unreliable  majority  vote  takers 

failure  rate  for  a  nonredundant  circuit  (or  subsystem) 

failure  rate  for  a  nonredundant  system  containing  m 
circuits  (or  m  subsystems) 

Ay  failure  rate  for  a  majority  vote  taker 

p  (t)  probability  that  a  circuit  will  operate  successfully 

from  time  0  to  t  assuming  that  the  circuit 
operated  properly  at  t  =  0 

q  (t)  =  1-p  (t)  probability  that  a  circuit  failed  in  the  period 
°  0  0  to  t 

q  (t)  probability  that  a  majority  group  containing  (2n+l) 

circuits  failed  in  the  period  0  to  t 

p  (t)  =  1-q  (t) 


M 

A  =  A 

o 

L  =  m\ 
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EXPLANATION  OF  SYMBOLS  (Continued) 


<*o(t) 

po(0 

Qn(0 


i-Qn(t) 


) 

} 


probability  that  a  nonredundant  system  containing 
m  circuits  failed  during  the  period  0  to  t 


probability  that  a  redundant  system  containing  m 
majority  groups  each  with  (2n  +  l)  identical 
circuits  failed  in  the  period  0  to  t 


q  (O 
Mna  ' 


P  ( t ) 
na'  ' 


1-q 


na 


probability  that  an  adaptive  majority  group 
containing  (2n  +  l)  circuits  failed  in  the 
period  0  to  t 


Q  ( t )  probability  that  a  system  containing  m  adaptive 

\  majority  groups  each  with  (2n  +  l)  circuits  will 

P_„(t)  =  1-Q  (t ) J  fail  in  the  period  0  to  t 
na  na 


q  (t)  "j  probability  that  a  majority  vote  taker  will  fail  in 

)  the  period  0  to  t 
Pv(t)  =  l-qv(t)J 

that  period  of  time  for  which  a  nonredundant  system 
can  operate  with  the  probability  of  system  failure 
being  less  than  or  equal  to  A  (A  «  l) 

T^  that  period  of  time  for  which  a  system  containing  m 

majority  groups  each  with  (2n  +  l)  circuits  can 
operate  with  the  probability  of  system  failure  being 
less  than  or  equal  to  A 

T2_  lower  bound  on  the  mean  time  to  failure  (MTF)  for  a 

redundant  system 
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I .  INTRODUCTION 


The  purpose  of  this  report  is  to  give  a  quantitative  evaluation  of 
the  improvement  in  reliability  which  can  be  achieved  in  a  digital  system 
by  the  use  of  redundancy  and  restoring  organs. 

Two  types  of  restoring  organs  are  considered,  and  the  relative 
merits  of  these  organs  are  discussed.  The  types  of  restoring  organs 
being  considered  are  majority  vote  takers  (MVT)  and  adaptive  vote 
takers  (AVT). 

A.  THE  FAILURE  MODEL 

In  this  report  we  are  primarily  concerned  with  the  effect  of  circuit 
failures  on  system  performance.  Ideally,  the  output  from  a  properly 
operating  digital  circuit  is  completely  determined  by  the  preceding 
sequence  of  input  digits,  whereas  the  output  from  a  circuit  that  has 
failed  is  independent  of  the  input  to  the  circuit.  In  a  practical 
situation  a  circuit  will  usually  be  close  to  one  or  the  other  of  these 
two  conditions;  that  is,  a  circuit  will  generally  either  have  an  error 
rate  which  is  many  orders  of  magnitude  less  than  1  or  an  error  rate  in 
the  order  of  '/2. 

It  is  assumed  that  a  failed  circuit  can  only  be  restored  to  proper 
operation  by  being  repaired.  We  shall  find  it  convenient  for  part  of 
the  analysis  to  assume  that  a  failed  circuit  always  gives  the  comple¬ 
ment  of  the  desired  output.  The  implications  of  this  assumption  are 
discussed  in  Chapter  II  where  it  is  pointed  out  that  this  assumption 
will  lead  to  a  pessimistic  estimate  of  the  improvement  in  reliability 
to  be  achieved  by  the  use  of  redundancy  and  restoring  organs. 

It  is  furthermore  assumed  that  the  circuit  failures  are  independent, 
and  that  the  number  of  circuit  failures  in  a  given  length  of  time  is 
Poisson  distributed.  It  can  be  shown  [Ref.  l]  that  this  in  general  is 
the  failure  distribution  to  be  expected  in  large  electronic  systems. 

B.  REDUNDANCY  AND  MAJORITY  VOTE  TAKERS 

One  technique  for  improving  the  reliability  of  a  digital  system 
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containing  m  digital  binary  subsystems  (or  circuits)  is  to  replace 
each  subsystem  by  a  group  of  2n  +  1  identical  subsystems  which  have 
the  inputs  connected  in  parallel.  The  binary  outputs  from  such  2n  +  1 
circuits  are  fed  to  a  "majority  vote  taker,"  so  that  the  overall  output 
from  the  group  of  2n  +  1  circuits  will  be  that  output  shown  by  the 
majority  of  the  circuits  (Fig.  2.6).  Such  a  group  of  identical  binary 
circuits  plus  associated  "vote  taker"  is  referred  to  as  a  "majority 
group."  It  is  seen  that  a  majority  group  will  give  the  desired  output 
if  more  than  half  of  the  (2n  +  l)  circuits  in  the  group  show  the 
correct  output. 

A  number  of  recent  papers  have  investigated  various  aspects  of  the 
use  of  redundancy  and  majority  logic  for  improving  the  reliability  of 
digital  systems.  [See  for  example  Refs.  2-6.] 

In  Chapters  II  and  III  of  this  report  we  investigate  the  improve¬ 
ment  in  reliability  which  can  be  achieved  by  dividing  a  digital  system 
into  m  circuits  (or  subsystems)  and  replacing  each  circuit  by  2n  +  1 
identical  circuits  followed  by  a  majority  vote  taker.  Simple  expressions 
are  developed  for  the  approximate  relationships  between  added  system 
complexity  (i.e.,  the  amount  of  redundancy  and  the  number  of  vote  takers) 
and  the  corresponding  improvement  in  system  reliability.  These  simple 
relationships  expressing  quantitatively  the  trade-off  between  system 
complexity  and  system  reliability  are  believed  to  be  new. 

C.  REDUNDANCY  AND  ADAPTIVE  VOTE  TAKERS 

For  a  fixed  amount  of  redundancy  (greater  than  3)  and  a  fixed  number 
of  vote  takers,  the  reliability  of  a  system  can  be  further  improved  if 
the  majority  vote  takers  are  replaced  by  adaptive  vote  takers.  By  com¬ 
paring  the  output  from  each  individual  circuit  with  the  output  from  the 
vote  taker,  it  is  possible  to  estimate  the  error  rate  for  the  individual 
circuits.  An  optimum  voting  procedure  can  then  be  established  in  which 
the  most  reliable  circuits  carry  more  weight  in  the  voting  than  the  less 
reliable  circuits.  In  its  simplest  form  the  adaptive  vote  taker  gives 
either  weight  one  or  weight  zero  to  a  circuit;  that  is,  initially  all 
circuits  carry  the  same  weight,  until  the  error  rate  ot  one  circuit 
increases  beyond  some  threshold  level,  in  which  case  that  circuit  is 
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eliminated  from  the  vote  taker.  The  adaptive  vote  taker  will  thus 
eliminate  the  circuits  as  they  fail,  and  the  "adaptive  majority  group" 
may  then  operate  as  long  as  at  least  two  circuits  in  the  group  are 
operating  properly.  The  reliability  which  can  be  achieved  by  this 
technique  is  investigated  in  Chapter  IV. 


D.  MEASURES  OF  RELIABILITY 

Three  measures  of  reliability  for  a  digital  system  are  considered: 
l)  Reliability  of  a  system  is  frequently  defined  as  the  probability 
P(t)  that  the  system  will  work  successfully  (i.e.,  without 
failure)  for  a  given  mission  time  t,  assuming  that  the  system 
was  operating  at  the  start  of  the  mission.  P(t)  is  referred  to 
as  the  probability  of  survival.  Q(t)  =  1  -  P(t)  is  then  the 
probability  that  the  system  will  fail  in  the  given  period  of  time 
t.  The  improvement  in  reliability  of  a  system  employing  redundancy 
relative  to  the  reliability  of  the  nonredundant  system  can  then  be 
defined  as 


P  (t) 

probability  of  survival  for  redundant  system  _  n 
probability  of  survival  for  nonredundant  system  PQ(t) 


(1.1) 


Alternatively,  the  improvement  could  be  expressed  in  terms  of  the 
probability  of  failure  for  the  two  systems: 


j  ( t )  _  probability  of  failure  for  nonredundant  system 

2'  '  ~  probability  of  failure  for  redundant  system 

1  -  Qo(t) 

=  i  -  p"(t)  =  077  (1 

n  n 

2)  The  mean  time  to  failure  (MTF)  of  a  system  may  be  taken  as  the 

r  00 

measure  of  system  reliability.  By  definition  MTF  =|  P(t)  dt; 

*T) 

the  relative  improvement  in  reliability  obtained  by  the  use  of 
redundancy  can  then  be  expressed  as 
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3)  As  a  third  measure  of  system  reliability  we  define  "the  useful  life" 
of  a  system  to  be  the  longest  mission  time  for  which  the  proba¬ 
bility  of  survival  is  greater  than  or  equal  to  1  -  A.  Alternatively, 
we  may  say  that  is  the  longest  mission  time  for  which  the 

probability  of  failure  is  no  greater  than  A.  It  follows  that 


Q(Ta)  =  A  and  Q(t)  =  1  -  P{t)  <  A  for  all  t  <  T^. 
The  corresponding  improvement  factor  is  defined  as 


I«(A) 


for  the  redundant  system 

for  the  nonredundant  system  T^ 


(1.4) 


E.  OUTLINE  OF  REPORT  -  RESULTS 

In  Chapter  II  we  consider  a  redundant  system  using  m  perfect 
majority  vote  takers  as  the  restoring  organs. 

We  first  derive  expressions  for  the  probability  of  survival  P(t) 
and  the  probability  of  failure  Q(t)  as  a  function  of  time.  Curves  of 
P(t)  and  Q(t)  are  given  for  various  values  of  m  and  n  (m  vote 
takers,  2n  +  1  redundant  circui+s). 

Next  we  derive  approximations  for  T^  when  A«  1.  T^  is  given  in 
terms  of  the  MTF  for  the  nonredundant  system  and  as  a  function  of  the 
number  of  vote  takers  and  the  amount  of  redundancy. 

Finally,  we  establish  lower  bounds  on  the  MTF  for  the  redundant 
system.  These  bounds  are  given  in  terms  of  the  MTF  for  the  nonredundant 
system  and  are  functions  of  the  amount  of  redundancy  and  the  number  of 
vote  takers. 

We  find  that  the  introduction  of  redundancy  changes  the  shape  of 
the  function  P(t)  significantly.  For  the  nonredundant  system,  P(t) 
changes  gradually  from  one  to  zero,  as  t  increases.  For  a  redundant 
system,  P(t)  tends  to  be  either  close  to  one  (for  small  t)  or  close 
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to  zero  (for  large  t),  with  a  relatively  steep  transition  between  these 
two  regions  (see  Figs.  2.3,  2.4,  2.7  and  2.8).  As  the  amount  of 
redundancy  is  increased,  the  separation  of  P(t)  into  two  regions, 
close  to  one  and  zero  respectively,  becomes  increasingly  more  pronounced. 
For  systems  with  large  redundancy,  the  time  T  ,  for  which  the 
probability  of  survival  is  close  to  one,  will  therefore  be  close  to  the 
MTF . 

In  the  case  of  perfect  vote  takers  we  find  that  T.  and  the  MTF 
increase  with  the  number  of  vote  takers  as  mn/n+1  (m  being  the 
number  of  vote  takers  and  2n  +  1  being  the  number  of  redundant  cir¬ 
cuits.)  Thus,  T^  and  the  MTF  will,  in  a  system  with  large  redundancy, 
increase  almost  proportionally  with  the  number  of  vote  takers. 

Tables  1  and  2  give  examples  of  the  improvement  in  reliability  to 
be  achieved  by  the  use  of  redundancy  and  majority  logic.  For  example, 
the  relative  increase  in  MTF  obtained  by  using  a  redundancy  of  5  and 
m  =  100  vote  takers  is  found  to  be  8.  For  m  =  1000  the  relative 
increase  in  MTF  would  be  39  (with  a  redundancy  of  5). 

The  relative  increase  in  useful  life  T^  which  can  be  achieved  by 

this  technique  is  much  more  impressive.  For  example,  if  the  permissible 

-2 

probability  of  failure  is  A  -  10  ,  then  with  a  redundancy  of  5  and 

with  m  =  100  vote  takers,  a  relative  increase  in  T^  of  215  times 
will  be  achieved.  Under  the  same  condition,  if  m  =  1000  the  relative 
improvement  in  T^  would  be  1000  times.  For  a  smaller  value  of  A 

the  relative  increase  in  T.  would  be  still  greater,  since  the  relative 

A  /  i 

increase  in  T^  is  propurtional  with  (l/A)  ' 

In  C.  apter  III  we  consider  the  case  of  non-perfect  majority  vote 
takers.  We  first  establish  a  condition  on  the  failure  rate  of  the 
majority  vote  taker  relative  to  the  failure  rate  of  the  system  in  order 
that  the  vote  taker  can  be  considered  ideal. 

In  the  case  when  the  vote  takers  cannot  be  considered  ideal  the  use 
of  redundant  vote  takers  is  suggested.  The  expressions  derived  in 
Chapter  II  for  T^  and  for  the  lower  bound  on  the  MTF  are  modified  in 
Chapter  III  to  include  the  effect  of  unreliable  redundant  vote  takers. 

As  one  would  expect  it  is  found  that  the  system  reliability  decreases 
if  too  many  unreliable  vote  takers  are  inserted  in  the  system.  An 
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expression  for  the  optimum  number  M  of  unreliable  vote  takers  to  be 
used  in  a  given  system  is  established.  It  is  concluded  that  in  most 
situations  we  will  be  limited  by  practical  considerations  to  use  far 
fewer  than  M  vote  takers.  It  should  be  pointed  out  that  the  optimum 
number  of  redundant  vote  takers  to  be  used  does  not  depend  on  which  of 
the  3  measures  of  reliability  is  used.  On  the  other  hand,  the  condition 
for  a  vote  taker  to  be  considered  ideal  depends  strongly  on  the  measure 
of  reliability  that  we  use. 

For  a  given  system  the  expressions  developed  in  Chapters  II  and  III 
permit  a  simple  quantitative  evaluation  of  the  trade-off  between  system 
complexity  (i.e.,  equipment  redundancy  and  the  number  of  majority  vote 
takers)  and  system  reliability. 

It  is  found  that  redundancy  and  majority  vote  takers  can  be  used 
to  substantially  increase  the  MTF  of  a  large  digital  system;  that  is  a 
system  which  can  conveniently  be  divided  into  a  large  number  of  binary 
subsystems.  Furthermore,  it  is  found  that  this  technique  is  much  more 
effective  in  increasing  that  period  of  time  for  which  the  probability 
of  system  failure  is  close  to  zero.  Thus,  this  technique  will  be  most 
effective  in  the  case  of  a  system  which  must  operate  with  a  very  small 
probability  of  failure  during  a  relatively  short  mission  time. 

In  Chapter  IV  we  consider  the  use  of  adaptive  vote  takers  as  the 
restoring  organ  in  a  redundant  system.  We  establish  expressions  for  the 
probability  of  failure  Qna(0  for  a  redundant  system  using  adaptive 
vote  takers.  Curves  showing  Q^a(t)  as  a  function  of  t  are  given  for 
redundancy  in  the  range  5  to  65. 

Finally,  the  reliability  achieved  in  a  redundant  system  by  using 
adaptive  vote  takers  is  compared  with  the  reliability  achieved  by  using 
majority  vote  takers.  We  find  that  under  a  wide  range  of  conditions  the 
use  of  approximately  10  MVT's  instead  of  each  AVT  will  result  in  a 
system  of  superior  reliability. 
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II.  MAJORITY  LOGIC  WITH  PERFECT  VOTE  TAKERS 


In  this  chapter  we  consider  a  redundant  digital  system  containing 
m  restoring  organs;  each  restoring  organ  being  a  perfect  infallible 
majority  vote  taker. 

We  derive  expressions  for  the  probability  of  survival  P(t)  and 
the  probability  of  failure  Q(t)  for  a  redundant  system  containing  m 
majority  vote  takers.  Plots  of  P(t)  and  Q(t)  are  given  for  a  wide 
range  of  m  and  n. 

Next  we  derive  an  approximation  for  "the  useful  life"  T^  (A  «  l) 
as  a  function  of  a)  the  failure  rate  of  the  corresponding  nonredundant 
system,  b)  the  redundancy  of  the  system,  c)  the  number  of  vote  takers 
used,  and  d)  A.  This  approximation  (2.22)  is  useful  for  evaluating 
the  trade-off  between  the  amount  of  redundancy  and  the  number  of  vote 
takers  required  to  achieve  a  desired  reliability. 

Furthermore,  we  establish  lower  bounds  on  the  MTF  for  the  redundant 
system,  and  finally,  we  compare  the  reliability  for  the  nonredundant 
system  with  that  of  the  redundant  system  in  order  to  determine  the 
improvement  achieved  by  the  use  of  redundancy  and  majority  logic. 

Expressions  for  the  improvement  in  reliability  are  given  in  (2.24) 
and  in  (2.32).  Numerical  values  of  the  reliability  improvement  for  a 
wide  range  of  n  and  m  are  given  in  Tables  1  and  2. 

A.  MAJORITY  LOGIC  WITH  ONE  PERFECT  VOTE  TAKER  -  THE  MAJORITY  GROUP 

First,  consider  a  nonredundant  binary  system  as  shown  in  Fig.  2.1A. 

This  system  has  a  binary  input  and  a  binary  output.  If  the  system  is 
working  properly,  the  output  at  any  time  will  be  1  or  0  depending  in 
some  specified  way  on  the  sequence  of  inputs  up  to  that  time.  Let  p 

o 

denote  the  probability  that  the  system  is  operating  properly,  and  let 
qQ  =  1  -  Pq  be  the  probability  that  the  system  is  not  operating  properly. 

In  the  following  we  are  going  to  assume  that  when  the  system  is  not 
operating  properly  it  has  as  an  output  the  complement  of  the  correct  output. 
(The  implication  of  this  assumption  is  discussed  in  connection  with 
formula  2.3  below.  ) 
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BINARY 

OUTPUT 

DIGITAL  CIRCUIT 

o  oTi 

A.  Nonredundant  digital  circuit 


2n*l 

IDENTICAL 

CIRCUITS 


B.  Majority  group 


FIG.  2.1.  NONREDUNDANT  DIGITAL  CIRCUIT  AND  CORRESPONDING 
MAJORITY  GROUP. 
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Next  consider  the  system  of  Fig.  2. IB.  Here  a  number  of  systems 
Identical  to  the  one  shown  in  Fig.  2.1A  are  driven  in  parallel;  i.e., 
they  all  receive  the  same  input.  If  they  were  all  operating  properly, 
they  would  all  produce  the  same  binary  output.  The  output  from  the 
overall  system  will  be  determined  by  a  "majority  vote  taker";  that  is, 
the  overall  system  will  give  the  output  which  is  given  by  the  majority 
of  the  individual  circuits.  This  means  that  the  overall  system  will 
give  the  correct  output  when  less  than  half  of  the  individual  circuits 
have  failed. 

If  the  probability  of  failure  for  the  individual  circuits  is  qQ, 
then  the  probability  that  exactly  i  circuits  out  of  2n  +  1  circuits 
will  have  failed  is 


Probability  (exact  i 


failures) 


/2n+l\  i 

\  *  h 


p 


2n+l-i 

o 


(2.1) 


where 


r2n+l\  (2n+l ) !  =  /  2n+l  \ 

,  i  )  ~  i ! (2n+l-i ) !  =  \2n+l-i/ 


(2.2) 


It  is  then  seen  that  the  probability  of  failure  q^  for  the  overall 
"majority  group"  shown  in  Fig.  2. IB  will  be 


2n+l 


E 


i=n+l 


(2n+l\  2n+l-i  i 

‘h 


(2.3) 


assuming  an  ideal  vote  taker. 

Equation  (2.3)  is  based  on  the  assumption  that  all  the  circuits 
which  have  failed  give  the  complement  of  the  desired  output.  If  the 
digital  output  is  represented,  for  example,  by  an  analog  voltage  (e.g., 
one  corresponds  to  +10  V  and  zero  corresponds  to  -10  V),  then  it 
would  actually  be  more  realistic  to  assume  that  when  the  digital  system 
has  failed  then  the  output  may  be  anywhere  between  "zero"  and  "one" 
(e.g.,  between  -10  V  and  +10  V).  Under  that  assumption  it  may  be 
possible  to  have  more  than  n  circuit  failures  and  still  achieve  the 


9 


SEL-63-134 


correct  output.  It  is,  however,  unlikely  that  the  majority  group  will 
be  consistently  correct  when  more  than  n  circuits  have  failed  (if  n 
is  small).  The  assumption  that  a  circuit  which  has  failed  shows  the 
complement  of  the  desired  output  is  thus  a  "worst  case"  assumption,  and 
the  probability  of  failure  which  we  find  for  the  redundant  system  based 
on  this  assumption  will,  if  anything,  be  too  large. 

The  probability  of  success  (no  failure)  for  the  majority  group  is 

V  ( 2n+l  |  i  2n+l-i  ,  .  . 

pn-  L  \  1  -1  -%  (2'4) 

i=0 


Figure  2.2  shows  p  as  a  function  of  q  for  various  values  of  n. 
n  o 

It  is  seen  from  Fig,  2.2  that  when  q  <  '/2  the  majority  group  has  a 

o 

probability  of  success  p^  which  is  greater  than  that  of  the  individual 
circuit.  For  values  of  qQ  >  '/2  the  probability  of  success  for  the 
majority  group  is  less  than  that  of  the  individual  circuit. 

Next  we  will  investigate  the  probability  of  failure  as  a  function  of 
time.  We  will  assume  that  the  circuit  failures  are  independent  and  that 
the  number  of  circuit  failures  in  a  given  length  of  time  is  Poisson 
distributed.  It  can  be  shown  [Ref.  l]  that  this  failure  distribution 
in  general  is  to  be  expected  for  a  large  system,  i.e.,  a  system  containing 
many  components. 

It  then  follows  that  the  time  between  failures  will  be  exponentially 
distributed,  and  we  can  write  the  following  expression  for  the  proba¬ 
bility  pQ  that  a  specific  circuit  has  not  failed  in  the  time  period 
0  to  t : 


po  =  P0(t)  =  e  Xt  =  1  -  qQ(t)  (2-5) 

where  A  is  the  failure  rate  and  l/\  is  the  MTF  for  the  type  of 

circuit  in  question.  We  will  also  refer  to  PQ(t)  as  the  probability 

of  survival . 

Inserting  this  expression  for  p  (t)  into  the  expression  (2.4)  we 

o 

find  Pn(t)  the  probability  of  survival  for  a  majority  group  as  a 
function  of  time: 
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(2.6) 


/  \  |2n+l  ]  ,  -XtNi  /  -Xt,2n+l-i 

pn(t)  =  L  \  i  /  (l  "  *  ]  {e  ] 

i=0 

Figure  2.3  shows  versus  time  for  various  values  of  n. 

Recall  that  the  mean  time  to  failure  for  the  system  is  given  by 

00 

MTF  p(t)  dt 


o  0.5  ' 

«0 


FIG.  2.2.  PROBABILITY  OF  SUCCESS  pn  FOR  A  MAJORITY 
GROUP  CONTAINING  2n  +  1  CIRCUITS,  SHOWN  AS  A 
FUNCTION  OF  THE  PROBABILITY  OF  FAILURE  qQ  FOR  THE 
INDIVIDUAL  CIRCUIT. 
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FIG.  2.3.  PROBABILITY  OF  SURVIVAL  Pn(t)  FOR  A  MAJORITY  GROUP  CONTAINING  2n  +  1  CIRCUITS, 
SHOWN  AS  A  FUNCTION  OF  At, 


It  is  then  seen  from  Fig.  2.3  that  the  MTF  of  the  system  actually 
decreases  as  n  increases,  and  in  the  limit  as  n  — .  oo  the  MTF  of  the 


majority  group  is  0.69  times  the  MTF  of  the  nonredundant  circuit.  How¬ 
ever,  it  is  also  seen  that  for  large  n  the  probability  of  failure  is 
either  very  small  (namely,  when  t  <  l/\  0.69)  or  close  to  one  (when 
t  >  l/X  0.69) . 

Introducing  (2.5)  into  (2.3)  we  get 
2n+l  /  \ 

/.\  (2n+l)  .  -XtNi  /  -Xt.2n+l-i  .  . 

9n(t)  =2^  \i/^1_e  )  (e  )  (2-7) 

i=n+l 


Figure  2.4  shows  q^(t)  as  a  function  of  Xt  for  n  in  the  range  0 
to  32.  Note  how  the  steepness  of  the  curves  increases  with  increasing 
redundancy . 

To  explore  the  behavior  of  q^(t)  in  the  range  where  the  probability 
of  failure  is  much  smaller  than  one  we  expand  the  expression  for  q^(t) 
around  t  =  0  and  drop  all  higher  order  terms.  We  find 


q 


n 


when  q  «  1 
o 


(2.8) 


and 


q  =(l-p  )  =  l-  e'V't=Xt  when  Xt  «  1  (2.9) 

o  o 


so  that 

dn(  f )  =  (2n^)  (^t)n+1  for  Xt  «  1  (2.10) 

Figure  2.5  shows  q  (t)  vs  Xt  for  Xt  «  1  and  for  0  <  n  <  4. 

n  —  — 

B.  MAJORITY  LOGIC  WITH  m  PERFECT  VOTE  TAKERS 

In  the  following  we  shall  investigate  the  improvement  in  reliability 
which  can  be  achieved  if  several  restoring  organs  (majority  vote  takers) 
are  used  within  the  redundant  system.  Consider  the  nonredundant  system 


13 


SEL-63-134 


<„(t> 1  <2V>  w*1 


FIG.  2,5.  PROBABILITY  OF  FAILURE  qn(t)  FOR  A  MAJORITY 
GROUP,  SHOWN  AS  A  FUNCTION  OF  t  FOR  At  «  1 . 
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of  Fig.  2.6A.  Let  the  failure  rate  for  this  system  be  L.  If  we  think 
of  this  system  as  consisting  of  m  (equal-sized)  subsystems,  then  the 
failure  rate  of  each  subsystem  will  be 


\ 


L 

m 


(2.11) 


Thus,  if  the  system  is  divided  into  a  large  number  of  subsystems, 
then  the  failure  rate  of  each  subsystem  will  be  much  less  than  the  failure 
rate  of  the  overall  system.  Correspondingly  the  probability  of  survival 
for  each  subsystem  will  be  considerably  closer  to  one  than  the  proba¬ 
bility  of  survival  for  the  overall  system.  Note  that  L,  the  failure 
rate  for  the  overall  nonredundant  system,  is  fixed,  whereas  \,  the 
failure  rate  of  the  subsystem,  depends  on  how  small  a  portion  of  the 
system  is  considered  a  subsystem. 

The  probability  of  survival  for  the  nonredundant  subsystem  is 

U\  -(Lt/m) 

P0(t)  =  e  =  e  ' 

The  probability  of  survival  for  the  overall  nonredundant  system  is 


p0(t)  =  [  PQ(t)  ]  m  =  e-^mt  =  e'Lt  =  1  -  Qjt)  (2.12) 

Figure  2.6B  shows  a  redundant  system  in  which  each  of  the  m  subsystems 
has  been  replaced  by  a  majority  group.  The  probability  of  survival  for 
this  system  is,  by  (2.6): 


(2.13) 


whe  re 


Po  =  1 


q  =  e"(Lt/m) 
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BINARY  OUTPUT 

♦ 


DIGITAL  SYSTEM 


%(t)  -  • 


-Lt 


EQUIVALENT  REPRESENTATION  OF  THE  ABOVE  SYSTEM 

P„(t)  - 


P0(t)  [»0(t)l*  .-Lt  -  *>.  r  L 


A.  Nonredundant  digital  system  containing 

at  subsystems 


2n  ♦  I 
IDENTICAL 
CIRCUITS 


P„(t) 


4 -  »  MAJORITY  GROUPS  - > 

MVT:  MAJORITY  VOTE  TARER 


B.  Redundant  digital  system  containing  m  majority  vote  takers 


FIG.  2.6.  NONREDUNDANT  SYSTEM  AND  CORRESPONDING  REDUNDANT  SYSTEM 
CONTAINING  m  MAJORITY  VOTE  TAKERS. 
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Figure  2.7  shows  I*n ( t: )  as  a  function  of  t  for  a  few  values  of  n 
and  m.  The  advantage  of  using  a  large  number  m  of  vote  takers  Is 
readily  apparent  from  these  curves. 

In  the  limiting  case  of  n  — *  oo  the  MTF  of  the  redundant  system  is 

MTF  =  0.7  ^  =  0.7  ^  \  (n-»  oo) 

thus,  in  this  limiting  case  the  MTF  increases  proportionally  with  the 
number  m  of  vote  takers  in  the  system. 

Figure  2.8  shows  Q^(t)  vs  for  a  wide  range  of  m  and  n. 

The  fully  drawn  curves  represent  the  exact  form  of  Qn(t)  as  given  by 
(2.13).  The  dotted  curves  represent  the  aporoximation  for  Q^(t) 
developed  in  (2.16)  below. 

Note  that  for  Qn(t)  «  i  the  steepness  of  the  curves  are  deter¬ 
mined  by  the  amount  of  redundancy  in  the  system  and  is  virtually  inde¬ 
pendent  of  the  number  of  vote  takers.  The  higher  the  redundancy,  the 
steeper  is  the  curve  for  Qfi(t).  On  the  other  hand,  increasing  the 
number  of  restoring  organs  (vote  takers)  in  the  redundant  system  tends 
to  move  the  curve  for  Q^(t)  further  to  the  right,  thus  improving  the 
reliability  of  the  system. 

C.  RELATIVE  INCREASE  IN  TA  ACHIEVED  BY  THE  USE  OF  REDUNDANCY  AND 

A 

PERFECT  MAJORITY  VOTE  TAKERS 

For  many  applications  a  computing  system  will  only  be  useful  during 

a  period  of  time  for  which  the  probability  of  systems  failure  is  much 

less  than  one.  We  therefore  define  the  "useful  life"  T^  of  a  system 

to  be  that  period  of  time  for  which  a  system  can  operate  with  the 

probability  of  failure  being  less  than  A  where  A  is  much  smaller 

than  one.  (See  Fig.  2.3).  In  this  section  we  will  derive  a  simple 

relationship  between  m,  n,  and  T^;  and  we  wil1  evaluate  the 

improvement  in  reliability  achieved  by  the  use  of  redundancy  and  majority 

logic  in  terms  of  the  ratio  of  TA  for  the  redundant  system  to  T. 

£n  Ao 

for  the  nonredundant  system. 
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FIG.  2.8.  PROBABILITY  OF  FAILURE  Q  (t)  FOR  A  REDUNDANT  DIGITAL  SYSTEM  CONTAINING  m  MAJORITY 
VOTE  TAKERS.  n 
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FIG.  2.8.  PROBABILITY  OF  FAILURE  Q  (t)  FOR  A  REDUNDANT  DIGITAL  SYSTEM  CONTAINING  m  MAJORITY 
VOTE  TAKERS.  n 
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FIG.  2.8.  PROBABILITY  OF  FAILURE  Q  (t)  FOR  A  REDUNDANT  DIGITAL  SYSTEM  CONTAINING  m  MAJORITY 
VOTE  TAKERS.  n 


If  q  (t)  is  the  probability  of  failure  for  a  single  majority  group, 
n 

then  the  probability  of  failure  for  a  system  containing  m  majority 
groups  is 


Qn(t)  =  i  -  [i  -  qn(t)  ]' 


(2.14) 


from  which  it  follows  that 


Q(t)=mq(t)  if  mq  (t)  «  1 
n  n  '  n 


(2.15) 


inserting  the  expression  (2.10)  in  (2.15)  we  next  get 


/  \  1 

fvt«l 

—1 

I2"1)  (U)"*1  If  < 

!  or  if 

mqR(t)  «  1 

\t  « 

1 

_(2T): 

l/n+1 


(2.16) 


and  by  equating  Q^(t)  with  A 


H  K) 


n+1 


^  A 


(2.17) 


from  which  it  follows  that 


r  =  ! 

An  * 


A 

l/n+1 

1 

m 

l/n+1 


(2.18) 


under  the  conditions  that 


«  1  as  required  by  (2.10) 


(2.19) 


and 


A«  1  as  required  by  (2.15) 


(2.20) 
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The  condition  (2.19)  can  be  written  as 


(2.21) 


next  inserting  \ 


L/m  into  (2.21 ) 


r  a  « i 


(2.22) 


From  (2.22)  it  is  seen  that  when  n  >  0  then  increases  with  the 

number  m  of  vote  takers,  and  if  n  »  1  then  T.  increases  almost 

’  An 

proportionally  with  m.  Also,  if  n  »  1  then  does  not  depend 

very  strongly  on  A  when  A«  1.  For  the  nonredundant  system,  n  =  0, 

T  =  j-  A  if  A  «  1  (2.23) 

To  evaluate  the  relative  increase  in  useful  life  T^  achieved  by 
the  use  of  redundancy  and  majority  logic  consider  the  ratio 


R 


1 


(2.24) 


Note  that  R^  increases  "almost  proportionally"  with  m  for  large  n 
Also  note  that  R^  is  proportional  with  (l/A)n/n+1 .  This  means  that 
redundancy  and  majority  logic  is  particularly  effective  in  the  case 
when  we  require  that  the  probability  of  failure  Q(t)  be  very  small 
during  the  mission  time  of  the  equipment;  i.e.,  if  we  require  A«  1. 
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From  the  curves  of  Fig.  2.8  it  is  seen  that  the  approximate  expres¬ 
sions  developed  above  lead  to  values  of  which  tend  to  be  smaller 

than  the  actual  value  of  T^.  Thus,  the  improvement  factor  Rj.  as 
given  by  (2.24)  will  be  too  small  for  large  A.  [The  largest  error 
results  from  approximating  p”  by  1  when  going  from  (2.3)  to  (2.8).) 

In  Table  1  is  shown  Rj.  for  various  values  of  n  and  m/A. 


TABLE  1.  RELATIVE  INCREASE  Rj.  IN  "USEFUL  LIFE"  T  ACHIEVED  BY  THE 
USE  OF  REDUNDANCY  AND  MAJORITY  LOGIC 


1 

■■ 

l/n+l 

Ri  for 

=  =  10* 

A 

Rl  for 

Rl  for 

!=io« 

LT .  for 

LT.  for 

2n+l 

=  . 

m=l 

-3 

A  =  10 

m^ioo 

—3 

A  «  10 

i 

- 

i 

1 

i 

1 

0.001 

0.001 

3 

0.58 

5.8 

18 

58 

180 

0.018 

0.18 

5 

0.46 

10 

46 

215 

1000 

0.046 

1.0 

7 

0.41 

13 

73 

2300 

0.073 

2.3 

9 

0.38 

15 

95 

3800 

0.095 

3.8 

11 

0.36 

17 

114 

780 

5300 

0.114 

5.3 

13 

0.35 

18 

129 

930 

6700 

0.13 

6.7 

15 

0.33 

19 

140 

1060 

7900 

0.14 

7.9 

17 

0.33 

20 

151 

1170 

9100 

0.15 

9.1 

19 

0.32 

20 

160 

1270 

10100 

0.16 

10.1 

21 

0.31 

21 

166 

1360 

11000 

0.17 

11 

33 

0.29 

22 

195 

1700 

14900 

0.20 

15 

65 

0.27 

24 

222 

2080 

_ 

19400 

_ 

0.22 

19 

If  the  failure  rate  of  the  nonredundant  system  is  known,  then  T^ 
can  be  found  from  Table  1  by 


D.  RELATIVE  INCREASE  IN  MTF  ACHIEVED  BY  THE  USE  OF  REDUNDANCY  AND 
PERFECT  MAJORITY  VOTE  TAKERS 

An  important  property  of  a  system  using  redundancy  and  restoring 

organs  is  the  shape  of  the  curve  PR(t)  versus  time. 

By  differentiating  P  (t)  as  given  by  (2.13)  with  respect  to  t 

n 

we  find  that 


29  - 
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dt  Pn  ( t )  |  =°  when  n  >  0 

t=0 

5tp0(t)|  =L  when  n  =  0 

t=o 


Thus,  initially,  P^(t)  will  decrease  at  a  rate  L  whereas  P^(t) 
will  have  zero  rate  of  decrease  at  t=0. 

From  Figs.  2.7  and  2.8  it  is  seen  that  for  a  highly  redundant  system, 
n  »  1,  P  (t)  will  be  close  to  one  or  zero  for  most  values  of  t. 

will  therefore  be  a  useful  lower  bound  on  the  MTF  for  a  system  with 
high  redundancy.  (As  noted  in  connection  with  (2.22)  T^  does  not 
depend  very  strongly  on  A  when  n  »  1.) 

In  Appendixes  1  and  2  we  have  developed  somewhat  more  complicated 
expressions  for  a  lower  bound  on  the  MTF  for  the  redundant  system.  The 
expressions  developed  in  the  Appendixes  are  useful  even  in  the  case  of 
low  redundancy . 

If  we  use  T.  as  a  lower  bound  on  the  MTF  we  find  for  the  redundant 
An 

system 


MTF  >  f 


-il  /n+1 


C1;1) 

MTF  >  y  Ki(A,n)  mn/n+1 


n/n+1 


A  «  1 


A  «  1 


(2.27) 


(2.28) 


where  l/L  is  the  MTF  for  the  nonredundant  system  and  where 


Ki(A,n)  = 


r»i 


l/n+l 


(2.27)  and  (2.28)  are  valid  ui  der  conditions  (2.20)  and  (2.21). 
Using  the  results  of  Appendixes  A  and  B  we  get 

MTF  >  Ka(n)  •  mn/n+1 


(2.29) 
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where 


/,  3  1  9  1 9  1  \, 

l1  "  2  n+2  +  8  2n+3  "  16  3n+4  )  f°r  ”  >  1 

(2.30) 

for  a  =  1 

(2.31) 

Ka(n)  and  K^A.n)  for  various  values  of  n 

and  A. 

It  is  seen  that  (2.28)  and  (2.29)  are  fairly  close  for  large  values 
of  n,  whereas  (2.29)  is  significantly  better  than  (2.28)  for  small 
values  of  n. 

From  (2.29)  it  is  seen  that  the  relative  increase  in  MTF  obtained 
by  the  use  of  redundancy  and  majority  logic  is  bounded  below  by 

l(m,n)  =  K2(n)  •  mn/n+1  (2.32) 

Table  2  gives  l(m,n)  for  a  few  values  of  m  and  n. 


Ka(n)  = 


3  1 


2  H1) 


l/r 


and 


Ka(n)  =  0.45 


Table  2  gives  values  of 


TABLE  2.  LOWER  BOUND  l(m,n)  ON  THE  RELATIVE  INCREASE  IN 
MTF  OBTAINED  BY  THE  USE  OF  REDUNDANCY  AND  MAJORITY  LOGIC 


2n+l 

Ki(A,n) 

A  =  l/lO 

Ki(A.n) 

A  =  l/lOO 

Kj(n) 

l(m,n) 

m  =  100 

l(m,n) 

m  =  1000 

3 

0.18 

0.058 

0.45 

4.5 

14 

5 

0.22 

0.10 

0.385 

8.2 

39 

7 

0.24 

0.13 

0.355 

11 

63 

9 

0.24 

0.15 

0.337 

13 

85 

n 

0.25 

0.17 

0.324 

15 

102 

13 

0.25 

0.18 

0.315 

16 

117 

15 

0.25 

0.19 

0.308 

17 

128 

17 

0.25 

0.20 

0.301 

18 

141 

19 

0.25 

0.20 

0.297 

19 

149 

21 

0.25 

0.21 

0.292 

19 

157 

00 

0.69 

0.69 

0.69 

69 

690 
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E .  CONCLUSIONS 


Assuming  ideal  vote  takers,  the  digital  system  will  be  most  reliable 
if  majority  logic  is  applied  at  as  low  a  level  as  possible,  i.e.,  when 
the  system  is  divided  into  as  many  digital  subsystems,  each  followed  by 
a  majority  vote  taker,  as  possible. 

On  the  other  hand,  it  is  clear  that  the  MTF  for  the  system  will 
always  be  less  than  the  MTF  for  the  individual  circuit.  In  the  limit 
as  n  — *  oo  we  have  seen  in  Fig.  2.7  that  the  system  MTF  could  be  0.69 
times  the  MTF  for  the  individual  circuit.  Equation  (2.29)  can  be  used 
to  find  a  lower  limit  on  the  MTF  for  given  values  of  m  and  n,  if 
L  is  known. 

Equation  (2.32)  gives  a  lower  bound  on  the  relative  increase  in  MTF 
obtained  by  using  redundancy  and  majority  logic,  even  if  A  and  L 
are  not  known . 

From  Eqs.  (2.22)  and  (2.32)  it  is  seen  that  the  use  of  redundancy 
and  majority  logic  gives  the  greatest  improvement  in  reliability  in  the 
case  of  large  systems,  i.e.,  in  systems  for  which  it  is  possible  to 
achieve  large  values  of  m. 

Finally,  for  a  fixed  mission  time  T,  which  is  much  shorter  than 
the  MTF,  we  have  the  following  expressions  for  the  probability  of 
failure: 


— LT 

Qq(t)  =  1  -  e  =  LT 


if  LT  «  1 


(2.12) 


Q  (T)  =  m 
n' 


so  that 


if  LT  « 


n/n+1 
m  9 


(2.16) 


«o(T) 

Q^ry- 


1 


for  LT  «  1 


(2.33) 
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(2.33)  clearly  shows  the  importance  of  making  m  the  number  of  vote 
takers  as  large  as  possible. 

It  should  be  emphasized  that  the  full  improvement  in  reliability 
is  realized  only  if  we  ensure  that  all  circuits  are  working  properly 
at  time  t  =  0,  that  is,  at  the  time  when  the  mission  is  about  to 
start . 

Finally,  it  should  be  noted  that  it  is  possible  to  build  a  system 
in  which  the  output  from  each  circuit  is  compared  with  the  output  from 
the  corresponding  majority  vote  taker.  If  a  circuit  fails,  it  may 
then  be  possible  to  detect  the  failure  and  manually  replace  the  circuit 
without  interrupting  the  operation  of  the  system. 
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III.  MAJORITY  LOGIC  WITH  NON-PERFECT  VOTE  TAKERS 


Expressions  for  evaluating  the  improvement  in  reliability  which 
can  be  achieved  by  the  use  of  redundancy  and  majority  logic  were  estab¬ 
lished  In  Chapter  II.  The  analysis  of  Chapter  II  was  based  on  the  use 
of  perfect  infallible  vote  takers. 

In  this  chapter  the  case  of  non-perfect  vote  takers  is  considered. 

We  shall  first  determine  a  condition  on  the  failure  rate  X  of  the  vote 

v 

takers  in  order  that  the  vote  takers  can  be  considered  ideal  (Eq.  3.7). 

If  the  vote  takers  can  not  be  considered  ideal,  the  use  of  redundant 
vote  takers  is  recommended.  By  appropriately  modifying  the  expressions 
of  Chapter  II  to  include  the  effect  of  the  unreliable  vote  takers,  we 
next  established  for  the  redundant  system  a  lower  bound  Ti  on  the  MTF 
and  an  approximation  for  T.  as  a  function  of  redundancy,  number  of 
vote  takers,  vote  taker  reliability,  and  system  reliability  for  the 
nonredundant  system. 

Finally,  we  established  an  expression  for  the  optimum  number  of 
redundant  unreliable  vote  takers  to  be  used  in  the  system. 

A.  CONDITIONS  FOR  CONSIDERING  THE  VOTE  TAKERS  TO  BE  IDEAL 

In  the  following  we  shall  establish  a  condition  on  Xy,  the 
failure  rate  of  the  majority  vote  taker,  in  order  that  the  MVT  can  be 
considered  ideal.  Let  py  be  the  probability  that  a  vote  taker  is 
working  properly,  then  q^  =  1  -  p^  will  be  the  probability  that  the 
vote  taker  is  not  working  properly.  We  will  assume  that  if  the  vote 
taker  is  not  working  properly,  then  it  will  have  as  an  output  the 
complement  of  the  desired  output.  (The  implications  of  this  assumption 
are  discussed  in  Chapter  IIA.) 

We  will  assume  that  the  number  of  vote-taker  failures  in  a  given 

length  of  time  obeys  the  Poisson  distribution;  furthermore,  let  the 

MTF  of  a  vote  taker  be  l/X  .  Then 

'  v 

-X  t 

Py(t)  =  e  V  (3.1) 
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and  the  probability  that  m  vote  takers  are  all  working  properly  becomes 

-X  mt 

Pv(t)  =  [pv(t)]m  =  e  v  (3.2) 

We  will  establish  a  condition  on  the  failure  rate  X  of  the  vote 

v 

takers,  such  that  the  probability  of  failure  for  the  system  shown  in 

Fig.  2.6B  is  essentially  uneffected  by  the  failures  of  the  vote  taker, 

that  is, we  will  establish  the  condition  on  X  for  the  vote  takers  to 

v 

be  considered  ideal. 

Consider  the  system  of  Fig.  2.6B.  The  probability  of  failure  for 
the  overall  system  assuming  ideal  vote  takers  is 

Q  (t)  <  A  for  t  <  T. 
n  —  —  A 

The  probability  that  none  of  the  vote  takers  will  fail  is 

-mX  t 

Pv(t)  =  e  V  (3.3) 

and  the  probability  of  failure  among  the  vote  takers  is 

-mX  T 

Qv(t)  =  (1  -  e  V  A)  for  t  =  Ta  (3.4) 

Thus,  if 

Qy(t)  «  A  for  t  <  Ta  (3.5) 

then  the  vote  taker  can  be  considered  to  be  ideal.  (3.5)  is  satisfied  if 

mX  T,  «  A  (3.6) 

v  A 
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Hence,  the  vote  takers  can  be  considered  ideal  if  the  mean  time  between 
failures 


(3.8) 


Note  that  the  requirement  to  the  reliability  of  the  vote  taker 
increases  as  A  is  decreased.  Fig.  3.1  indicates  the  reason  for  this. 
Recall  that 


fnW 

dt 


=  0 


at 


t=0 


w  *■(*«> 

9,(*|)  <  <  '  »,(t2)  '  *  ' 


FIG.  3.1.  PROBABILITY  OF  AT  LEAST  ONE  FAILURE  AMONG  m  VOTE  TAKERS 
COMPARED  WITH  THE  PROBABILITY  OF  FAILURE  AMONG  m  MAJORITY  GROUPS. 
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for  the  redundant  system  with  Ideal  vote  taker.  Also  note  that  for  the 
nonredundant  vote  takers 


dt 


at  t=0 


Hence,  for  any  A^  >  0  there  will  always  be  some  period  of  time  for 
which  the  (nonredundant)  vote  takers  will  be  the  major  contributor  to 
the  system  failures. 


B.  USEFUL  LIFE  T  AND  MTF  ACHIEVED  BY  REDUNDANCY  AND  NON-PERFECT 

VOTE  TAKERS 

In  the  case  when  the  failure  rate  of  the  vote  takers  cannot  be 
neglected,  we  can  use  redundant  vote  takers  as  shown  in  Fig.  3.2A,  The 
system  of  Fig.  3.2A  can  be  represented  as  shown  in  Fig.  3.2B  as  a  system 
using  nonredundant  ideal  vote  takers  in  which  the  failure  rate  of  the 
individual  circuit  is  the  sum  of  the  failure  rate  of  the  original  circuit 
and  the  failure  rate  of  the  vote  taker  feeding  that  circuit.  The 
probability  of  survival  for  the  individual  circuit  of  Fig.  3.2B  is 


or  using 


-X  t  -At  -(A  +A  )t 

V  O  VO 

p  =  p  p  =  e  e  =  e 

vo 


A 

v 


) 


(3.9) 


(3.10) 


Then  by  (2.13)  we  get 


Pn<*> 


1  -  «„(.) 


where 
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BORPERFTCT  VOTE  TAKER 
PROBABILITY  Of  FAILURE  qw  =  (I  -  pv) 


A.  System  containing  redundant 
majority  vote  takers 


PERFECT  VOTE  TAKER 


B.  Model  for  analyzing  system  containing  redundant 
majority  vote  takers 


FIG.  3.2.  USE  OF  REDUNDANT  MAJORITY  VOTE  TAKERS. 
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p 


L  +  mX 

-H-) 


The  curves  of  Figs.  2.7  and  2.8  show  respectively  the  probability 

of  survival  P  (t)  and  the  probability  of  failure  Q  (t)  as  a  function 
n  n 

of  Lt  for  a  redundant  system  using  perfect  vote  takers.  Note  that 
the  same  curves  apply  to  a  redundant  system  using  redundant  non-perfect 
vote  takers  if  Lt  on  the  abscissa  is  replaced  by  (L  +  mXv)t.  (This 
change  in  scale  on  the  abscissa  clearly  does  not  apply  to  the  curve 
for  the  nonredundant  system.) 

To  find  T<irl  for  the  system  of  Fig.  3.2  substitute  (—  +  X  )  for 
An  m  v 

X  in  Eq .  (2.18)  and  get 


or 


(3.11) 


(3.12) 


Similarly,  substitute  (L  +  mX^)  for  L  in  (2.29)  to  get 

MTF  >  - - -  •  mn/n+1  •  K2  (n )  =  T  (3.13) 

L  +  mX  1 

v 

C.  OPTIMUM  NUMBER  OF  REDUNDANT  NON-PERFECT  VOTE  TAKERS 

In  the  case  of  the  ideal  vote  taker,  T,  and  T^  would  increase 
n  /n+  X  ^ 

proportionally  with  m  '  ;  thus,  for  a  given  redundancy  T^  and  Tx 

would  be  maximized  if  vote  takers  are  applied  at  the  lowest  possible 
level  (i.e.,if  m  is  made  as  large  as  possible).  Alternatively,  m 
and  thereby  T^  might  be  limited  by  the  cost  of  the  vote  takers. 
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If  the  vote  taker  is  unreliable,  then  the  reliability  of  the  system 
will  actually  start  to  decrease  if  the  number  of  vote  takers  is  increased 
above  some  optimum  value. 

To  find  the  optimum  value  of  m,  for  a  fixed  n,  differentiate 
(3.12)  and/or  (3.13)  and  find 


d_ 

dm 


n/n+i 


(L  +  mX 


=  0 


when 


n  >  1 


thus,  the  maximum  of  T,  and  Tj.  is  achieved  for 

LTl 


m 


(3.14) 


Inserting  MA  =  L  in  (3.14)  we  find 
o 

MA  =  Ln  s  MA  n 
v  o 

thus  maximum  reliability  is  achieved  if: 

A  i 
o  _  1 

A  n 

v 


(3.15) 


(3.16) 


For  n  =  1,  i.e.,  3  circuits  in  parallel,  the  optimum  division  of 
the  system  will  then  be  such  that  the  failure  rate  X^  of  the  individual 
circuit  is  equal  to  the  failure  rate  X^  of  the  vote  taker.  For  larger 
values  of  n  the  optimum  division  will  be  such  that  the  failure  rate 
of  the  individual  circuit  is  actually  less  than  the  failure  rate  of 
the  vote  taker. 

Clearly,  the  optimum  value  of  m  as  found  in  (3.14)  will  also 

minimize  Q  (t).  This  can  be  checked  by  replacing  X  in  Eq.  (2.16) 

L  ^ 

by  (—  +  X^)  and  differentiating  with  respect  to  m. 
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Equation  (3.14)  gives  a  value  of  m  which  should  not  be  exceeded. 
Several  reasons  might  exist  why  a  smaller  value  of  m  will  be  used  in 
any  given  situation.  One  obvious  constraint  on  m  is  the  cost  of  the 
vote  takers. 

In  most  practical  cases  systems  complexity  or  systems  cost  will 
present  a  constraining  factor.  Increases  in  n  and  m  each  represent 
an  increase  in  systems  cost  (or  complexity).  For  a  given  situation 
once  the  relative  cost  of  increasing  n  or  m  has  been  established, 

Eq .  (3.12)  or  (3.13)  can  be  used  to  establish  the  trade-off  between  n 
and  m.  It  is  seen  from  (3.12)  that  when  m  «  M,  then  T.  will 
increase  "almost  proportionally"  with  m,  whereas  when  m  gets 
closer  to  M,  then  will  increase  much  more  slowly  as  a  function 

of  m . 

Furthermore,  the  smallest  block  to  which  majority  logic  can  be 
applied  must  itself  be  a  digital  unit.  Since  a  majority  vote  taker  is 
a  rather  simple  circuit,  it  will  in  most  practical  situations  not  be 
possible  to  achieve  the  optimum  value  of  m,  since  the  smallest  digital 
unit  in  the  system  will  usually  have  a  failure  rate  larger  than  the 
failure  rate  of  the  vote  taker. 
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IV.  MAJORITY  LOGIC  WITH  ELIMINATION  OF  UNRELIABLE  CIRCUITS  - 


ADAPTIVE  VOTE  TAKERS 


In  this  chapter  we  consider  the  use  of  adaptive  vote  takers  (AVT) 
as  the  restoring  organ  in  a  redundant  system.  An  expression  for  the 
probability  of  failure  Q^a(t)  for  a  redundant  system  using  AVT's  is 
established;  and  we  compare  graphically  the  reliability  which  can  be 
achieved  in  a  redundant  system  by  the  use  of  AVT's  with  the  reliability 
which  can  be  achieved  by  the  use  of  Majority  Vote  Takers  (MVT) .  We  find 
that  under  a  wide  range  of  conditions  the  use  of  approximately  10  MVT's 
in  place  of  each  AVT  will,  for  a  fixed  amount  of  redundancy,  result  in  a 
system  of  superior  reliability. 

A.  ADAPTIVE  VOTE  TAKERS  VERSUS  MAJORITY  VOTE  TAKERS 

For  a  fixed  amount  of  redundancy  greater  than  3  and  a  fixed  number 
of  vote  takers  the  reliability  of  a  system  can  be  further  improved,  if 
the  majority  vote  taker  is  replaced  by  an  adaptive  vote  taker.  By  com¬ 
paring  the  output  from  each  individual  circuit  in  a  majority  group  with 
the  output  from  the  vote  taker,  it  is  possible  to  estimate  the  error 
rate  of  the  individual  circuits.  An  optimum  voting  procedure  can  then 
be  established  in  which  the  more  reliable  circuits  carry  more  weight  in 
the  voting  than  do  the  less  reliable  circuits.  Pierce  [Ref.  7]  has 
established  the  voting  procedure  which  will  minimize  the  probability  of 
error  in  the  output  of  the  vote  taker  for  arbitrary  known  error  rates 
of  the  individual  circuits.  This  optimum  voting  procedure  requires 
that  the  vote  weight  of  the  individual  circuits  can  be  set  to  any  value 
between  1  and  0  depending  on  the  error  rate  of  the  circuit. 

In  its  simplest  (non-optimum)  form, an  adaptive  vote  taker  gives 
either  weight  one  or  weight  zero  to  a  circuit;  i.e.,  initially  all 
circuits  carry  weight  1  until  the  error  rate  of  one  circuit  increases 
beyond  some  threshold  level,  in  which  case  that  circuit  is  eliminated 
from  the  vote  taker  (see  Fig.  4.l).  The  adaptive  vote  taker  will  thus 
eliminate  the  circuits  as  they  fail  and  the  "adaptive  majority  group" 
may  then  operate  as  long  as  at  least  two  circuits  in  the  group  are 
operating  properly. 
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FIG.  4.1.  ADAPTIVE  MAJORITY  GROUP.  (Majority 
vote  with  elimination.) 


We  shall  restrict  our  discussion  in  the  following  to  this  type  of 
adaptive  vote  taker  only.* 

If  the  probability  of  failure  for  the  individual  circuit  is 

qQ(t)  =  (l  -  e-Xt) 

and  if  the  adaptive  vote  taker  is  perfect,  then  the  probability  of 
failure  3na(0  *or  the  adaptive  majority  group  is 

-  % +1  +  •  %  C4-1) 


In  many  practical  situations  a  circuit  will  either  be  working  almost 
perfectly,  i.e.,  with  an  error  rate  which  is  many  orders  of  magnitude 
less  than  one,  or  it  will  have  failed  completely,  i.e.,  the  output  from 
the  circuit  will  be  independent  of  the  input.  If  the  circuits  under 
consideration  are  indeed  in  one  or  the  other  of  the  above  two  states 
(most  of  the  time),  then  the  reliability  which  can  be  achieved  by  using 
an  adaptive  vote  taker,  which  eliminates  the  failed  circuits,  will  be 
(virtually)  as  good  as  the  reliability  which  can  be  achieved  by  using 
an  adaptive  vote  taker  which  has  continuous  weights. 
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Figure  4.3  shows  qnfl(t)  as  a  function  of  t  for  n  ranging  from  2 
to  32.  (The  curves  marked  by  A).  For  comparison  the  probability  of 
failure  qn ( t )  for  the  corresponding  majority  group  is  also  shown  in 
Fig.  4.3. 

Over  the  range  of  t  for  which  q^(t)  «  1  we  find  as  expected 
that  <lna(t)  «  Q  (t)i  thuS|  as  a  restoring  organ,  the  adaptive  vote 
taker  is  superior  to  the  majority  vote  taker. 

It  appears  that  an  adaptive  vote  taker  will  be  considerably  more 
difficult  to  realize  than  a  majority  vote  taker.  It  may  therefore  be 
more  reasonable  to  compare  the  reliability  which  is  achieved  by  using 
one  adaptive  vote  taker  with  the  reliability  which  could  be  achieved 
by  using  m  majority  vote  takers  in  the  same  system  (see  Fig.  4.2). 

In  Fig.  4.3  we  have  shown  the  probability  of  failure  Q  (t,m) 

n 

versus  time  for  a  system  using  m  (ideal)  majority  vote  takers,  for 
m  =  1,  5,  10,  and  20.  Also  shown  is  the  probability  of  failure  for  the 
same  system  using  one  adaptive  vote  taker.  First,  a  remark  about  the 
behaviour  of  Q  (t,m)  and  q  (t)  for  t  close  to  zero;  from  (2.16) 
by  replacing  ^  by  L/m 

Qn(t,m)  =  ~  ^n1)  (Lt)n+1  for  Lt  «  1  (4.2) 

f  rom  (4.l) 


q  (t)  =*  (2n+l)  (Lt)2" 

nu 


for  Lt  «  1  (4.3) 


Since  q  (t)  goes  as  t  to  the  power  2n,  whereas  Q  (t)  goes  as  t 
na  n 

to  the  power  (n+l),  it  is  clear  that  regardless  of  the  value  of  m 

there  will  always  be  a  range  of  t  such  that  Q  (t)  >  q  (t)  for 

n '  '  na '  ' 

0  S  t  £  t*.  It  is  interesting  to  compare  the  behaviour  of  q  (t)  with 

na 

the  behaviour  of  Qn(t)  for  m  =  10.  From  the  curves  of  Fig.  4.3  we 

see  that  (for  2  §  n  £  32)  Q(t)  and  q  ( t )  have  a  cross-over  point, 

n  na 

and  that  Q  (t)  actually  is  significantly  smaller  than  q  (t)  over  a 
n  na 


considerable  range  of  t 

and 

q. 

For  n  =  2  and  m 

=  10  the  cross-over 

is  seen  to  take  place  at 

q  ~ 

.  -8 

io-6 

For  n  =  8  and 

m  =  10  the  cross- 

over  takes  place  at  q  » 

10  . 

As 

n  increases,  the 

cross-over  takes 

SEL-63-134 

-  44  - 
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CIRCUITS 
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*  VOTE  TAKERS 
PROBABILITY  OF  FAILURE  ^(t,  ■) 


A.  System  using  m  majority  vote  takers 


PROBABILITY  OF  FAILURE  R„t(t) 


B.  System  using  one  adaptive  vote  taker 


FIG.  4.2.  COMPARISON  BETWEEN  A  REDUNDANT  SYSTEM  USING  ONE 

ADAPTIVE  VOTE  TAKER  AND  A  REDUNDANT  SYSTEM  USING  m  MAJORITY 
VOTE  TAKERS. 
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FIG.  4.3.  PROBABILITY  OF  FAILURE  FOR  A  REDUNDANT  SYSTEM  CONTAINING  ADAPTIVE  VOTE  TAKERS  COMPARED 
WITH  THE  PROBABILITY  OF  FAILURE  FOR  A  REDUNDANT  SYSTEM  USING  m  MAJORITY  VOTE  TAKERS. 


FIG.  4.3.  PROBABILITY  OF  FAILURE  FOR  A  REDUNDANT  SYSTEM  CONTAINING  ADAPTIVE  VOTE  TAKERS  COMPARED 
WITH  THE  PROBABILITY  OF  FAILURE  FOR  A  REDUNDANT  SYSTEM  USING  m  MAJORITY  VOTE  TAKERS. 


FIG.  4.3.  PROBABILITY  OF  FAILURE  FOR  A  REDUNDANT  SYSTEM  CONTAINING  ADAPTIVE  VOTE  TAKERS  COMPARED 
WITH  THE  PROBABILITY  OF  FAILURE  FOR  A  REDUNDANT  SYSTEM  USING  m  MAJORITY  VOTE  TAKERS. 


place  at  a  smaller  value  of  q.  Also,  It  is  seen  that  for  a  fixed  n 
the  cross-over  can  be  moved  back  (i.e.,  toward  smaller  t  and  smaller 
q)  by  increasing  m. 

We  will  now  compare  the  reliability  of  a  system  using  one  adaptive 
vote  taker  and  having  redundancy  2n+l  =  5  with  a  system  using  m  =  10 
majority  vote  takers  and  having  redundancy  2n+l  =  5.  From  the  curves 
of  Fig.  4.3A  it  is  seen  that 

])  If  the  MTF  is  taken  as  the  criterion  for  reliability,  then  the 
system  using  m  =  10  majority  vote  takers  is  the  most  reliable. 

2)  If  is  taken  as  the  criterion  for  reliability,  then  the  system 

using  10  majority  vote  takers  is  the  most  reliable  of  the  two 
—6 

systems,  if  A  >  10  ;  and  it  is  the  least  reliable  of  the  two, 

if  A  <  10"6. 

3)  If  the  mission  time  T  is  fixed  and  Q(T)  is  the  criterion  for 
reliability,  then  the  system  using  10  majority  vote  takers  is 
the  most  reliable  of  the  two  systems,  if  T  >  0.02  Lt ,  and  it  is 
the  least  reliable  of  the  two  if  T  <  0.02  Lt . 

Similar  conclusions  can  be  reached  for  other  values  of  m  and  n 
by  means  of  the  curves  shown  in  Fig.  4.3.  The  curves  shown  in  Fig.  4.3 
are  all  based  on  the  use  of  "ideal"  vote  takers.  If  the  vote  takers 
are  not  perfectly  reliable,  we  may  use  redundant  vote  takers  as  dis¬ 
cussed  in  Chapter  III.  However,  in  the  case  of  the  adaptive  vote  taker, 
“ideal"  not  only  refers  to  the  reliability  of  the  circuitry,  but  also 
implies  instantaneous  adaption.  With  a  finite  time  delay  in  the 
adaptive  process,  the  probability  of  failure  qn(t)  wiH  be  somewhat 
larger  than  shown  in  the  curves  of  Fig.  4.3,  and  the  cross-over  point 

between  q  and  Q  will  move  further  to  the  left.  By  increasing  m 
na  n 

it  is  possible  to  make  the  two  curves  q  and  Q  cross  over  at  a 

na  n 

point  where  the  probability  of  failure  is  arbitrarily  small. 

Finally,  we  will  compare  the  case  of  a  system  using  m  adaptive 

vote  takers  with  a  system  using  m  =  m1ma  majority  vote  takers.  In 

Fig.  4.3A  we  have  shown  curves  ior  Q  (t,m  )  and  Q  (t,m  m  )  where 

na  a'  n  1  a 

Qna(t)  is  the  probability  of  failure  for  a  system  using  ma  =  100 
adaptive  vote  takers,  and  where  Qn(t)  *s  the  probability  of  failure 


SEL-63-134 


50 


for  a  system  using  mm  =  1000  majority  vote  takers.  It  is  seen 

1  a  _4 

that  the  cross-over  for  these  2  curves  is  at  q  =  10 

In  general,  if  the  cross-over  between  q  (t)  and  Q  (t)  is  at 
’  na'  '  n 

q  =  A,  (where  q  (t)  is  the  probability  of  failure  for  one  adaptive 
na 

majority  group,  and  Q  (t)  is  the  probability  of  failure  for  the  same 
'  n 

group  containing  m  majority  vote  takers),  then  the  cross-over  point 

for  the  curves  Q  (t,m  )  and  Q  (t,m  m, )  will  be  at 
na'  a  n'  a  1' 

q±m  -  A  if  m  A  «  1 
a  a 

From  the  expressions  (4.2)  and  (4.3)  (and  Fig.  4.3),  it  is  seen 
that  we  can  make 

Q  (t,m)  <  q  (t)  for  all  t  (4.4) 

if  we  employ  about  twice  the  amount  of  redundancy  in  the  system  using 
majority  vote  takers  as  is  used  in  the  system  using  adaptive  vote 
takers.  Specifically  (4.4)  is  satisfied  if 

(n+1 )  2  2t\  (4.5) 

and 

(2n^)  <  mn(2ri+l)  (4.6) 

where  (2n+l)  is  the  number  of  redundant  circuits  in  the  case  of 
majority  logic  and  ( 2rj  +1 )  is  the  number  of  redundant  circuits  in  the 

case  of  adaptive  vote  takers.  (4.6)  is  satisfied  for  m  2  3  if  n  ^  14. 

B.  CONCLUSION 

Two  types  of  restoring  organs  have  been  compared,  the  adaptive  vote 
taker  and  the  majority  vote  taker.  In  a  triple  redundant  system  the 
two  types  of  restoring  organs  are  equivalent.  In  a  system  of  higher 
redundancy  the  adaptive  vote  taker  is  considerably  more  efficient  as  a 
restoring  organ  than  the  majority  vote  taker.  However,  it  is  always 
possible  to  achieve  the  same  system  reliability  by  means  of  majority 
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vote  takers  as  can  be  achieved  by  means  of  adaptive  vote  takers,  by 
using  more  majority  vote  takers  and/or  by  using  a  higher  amount  of 
redundancy.  Under  a  wide  range  of  conditions  the  use  of  approximately 
10  majority  vote  takers  in  place  of  each  adaptive  vote  taker  will  (for 
a  fixed  amount  of  redundancy)  result  in  a  system  of  superior  reliability. 

The  choice  of  restoring  organ  to  be  used  in  a  given  redundant  system 
will  then  in  part  depend  on  the  ease  with  which  the  particular  restoring 
organ  can  be  realized.  At  the  present  time,  there  is  no  simple  technique 
for  realizing  adaptive  vote  takers,  whereas  majority  vote  takers  with 
up  to  about  9  inputs  are  relatively  easy  to  implement.  Thus,  for  the 
time  being,  the  use  of  majority  vote  takers  appears  more  promising  than 
the  use  of  adaptive  vote  takers. 
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V.  CONCLUSIONS 


This  report  presents  a  quantitative  evaluation  of  the  improvement 
in  reliability  which  can  be  achieved  in  a  digital  system  by  the  use  of 
redundancy  and  restoring  organs.  Simple  expressions  are  given  for  the 
trade-off  between  added  system  complexity  (i.e.,  the  number  of  vote 
takers  and  the  amount  of  redundancy)  and  the  corresponding  improvement 
in  system  reliability. 

It  is  concluded  that  while  the  use  of  redundancy  and  restoring 
organs  can  substantially  increase  the  MTF  of  a  digital  system,  the 
technique  is  much  more  effective  in  increasing  the  useful  life  T^ 

(for  A  «  l)  of  a  system.  Thus,  this  technique  will  be  most  useful 
in  the  case  of  a  system  that  must  operate  with  an  exceedingly  small 
probability  of  failure  for  a  relatively  short  period  of  time. 

The  improvement  in  system  reliability  is  found  to  increase  rapidly 
as  a  function  of  the  number  of  restoring  organs  employed.  For  a  highly 
redundant  system  the  MTF  and  T^  increase  almost  proportionally  with 
the  number  of  restoring  organs.  Thus,  this  technique  for  improving  system 
reliability  will  be  most  useful  in  the  case  of  large  systems,  that  is 
in  the  case  of  systems  which  can  conveniently  be  divided  into  a  large 
number  of  binary  subsystems. 

Two  types  of  restoring  organs  have  been  considered:  the  majority 
vote  taker  and  the  adaptive  vote  taker.  For  a  triple  redundant  system 
the  two  types  of  restoring  organs  are  equivalent .  For  systems  of 
higher  redundancy  the  adaptive  vote  taker  is  more  efficient  as  a  restoring 
organ  than  the  majority  vote  taker.  However,  the  reliability  which  can 
be  achieved  by  using  a  given  number  of  adaptive  vote  takers  in  a  redun¬ 
dant  system  can  often  be  equalled  or  exceeded  by  using  instead  approxi¬ 
mately  10  times  as  many  majority  vote  takers  in  the  system.  The  choice 
of  restoring  organ  will  therefore  in  part  depend  on  the  relative  cost 
of  implementing  the  two  types  of  restoring  organs. 
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APPENDIX  A.  DEVELOPMENT  OF  A  LOWER  BOUND  ON  THE  MTF  FOR  A  TRIPLE 


REDUNDANT  SYSTEM  USING  m  MAJORITY  VOTE  TAKERS 

From  (2.3)  we  have 

<ln(t)  =  qo  +  3poqo  =  qo  +  “  qo)qo  for  n  =  1  (A‘1) 

d  At)  =  3q2  -  2q® 

1  00 

Pl(t)  =  1  -  3q2  +  2q2  (A. 2) 

Pl(t)  S  1  -  3q*  (A. 3) 

next,  if  f>o(t)  =  e  then  qQ(t)  -  and 

Pl(t)  £  (I  -  3(Xt)2)  (A.  4) 

Px(t)  =  (Pl(t))m  £  (1  -  3(Xt)2)m  if  (l-3(Xt )2 )  >  0  (A. 5) 

Next,  we  shall  show  that  for  m  >  3 

m 

i=0 

if  0  <  x  <  -  (A. 6) 

—  m 

To  show  the  inequality  of  (A. 6)  we  show  that  the  remainder 

m 

Y  )*1  - 0  “ 

i=4 


Observe  that  the  first  term  of  the  remainder  is  Posltive,  and  that 
the  ratio  of  succeeding  terms  is 
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if  0  <  x  <  —  and  i  >  4 
m  — 


(A. 7) 


thus,  the  terms  are  decreasing  with  i,  and  since  the  first  term  is 
positive  the  sum  must  be  positive. 

Using  (A. 6)  in  (A. 5)  get 


Px(t)  §  1  -m  3(Xt)2  +  ^  2  j  (3 (At ) * ) 2  -  (  ”  )  (3(Xt)2 )3 

if  3(Xt)2  <  - 
m 


(A. 8) 


MTF  =  j  Pi(t)  dt  >  f  Pi(t)  dt 
•*0  u 


MTF  >  J  11  -  m  3(Xt)2  +  (”)  (3(Xt  )2  )*  J  j  (3(Xt)2)3  dt 


if  3(Ati)2  <  —  and  m  >  3 


(A. 9) 


Since  the  integrand  is  negative  for  3(Xt)2  =  —  and  since  the 

m 

cross-over  (from  positive  to  negative  integrand)  is  at  approximately 

3  1  11 

3(Xt)z  =  —  —  we  evaluate  (A. 9)  for  ti  =  r-  -  and  get 

2  m  A 


MTF  > 


1  JT7  f  1  m-1  .  9_  (m-l)  (m-2)  9  ( 

X  f 2m  \  2  +  m  ’  40  2  '  112  j 


(A. 10) 


MTF  > 


if  »• 


45 


for  m  S  3 


(A. 11) 


For  m  =  1 
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that 


Pi(t)  =  P3  +  3p2  (l  -  p  )  =  3pa  -  2p3  =  3e  2'>vt  -  2e  3^t 
'  o  o  o  o  o 

00 

MTF  Pi(t)dt  =  X  (f  "  l)=  X  0,83  for  m  =  1  (A. 12) 

Substituting  L  =  mA  in  (A.ll)  and  (A. 12)  we  find  for  all  m 

MTF  >  i  0.45  (A. 13) 
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APPENDIX  B.  DEVELOPMENT  OF  A  LOWER  BOUND  ON  THE  MTF  FOR  A  (2n+l) 
REDUNDANT  SYSTEM  USING  m  MAJORITY  VOTE  TAKERS 


The  following  is  a  generalization  of  the  development  of  Appendix  A. 
From  (2.3)  we  have 


2n+l 


V  /2n+l\  i  (2n+l-i) 

"  L  (  1  K 


(B.l) 


i=n+l 


qn(t)  = 


/2n+l\  n+1  ),.  Nn  n  /,  ..  xn-l  .  1  _n\ 


i  «/ 


n+i  /.  \n  n  /_  \ii-i 
q-  <(l"qo)  +  ^2  +  •••  + 


/  \  / 2n+l  \  n+1  j /  \n  /  \n-l  2/  \n“ 

„  )  %  ((1-V  *  *  "o*1-’,) 


Cr )  ‘ 

(b  .  2 ) 


2  n 

+  .  .  .q 

o 


(B .  3 ) 


Since 


(q 


i=0 


then 


1  B  Z  qo 


for  0  <  q  <1 
—  o  — 


i=0 


(B.4) 


so  that 


,  ( 2n+l  \  n+1 

qn(t>  "  [  n  J  qo 


(B.5) 


and 


/  N  .  ,  /2n+l\  n+1 

"„(t>  2  1  -  1  n  )% 


(B  •  6 ) 
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Now  if  pQ(t)  =  e  ^  then  qQ(t)  < 
and  Pn(t)  >  1  -  {^2n^lSj  (^t)n+1 
Also 

p„t.)  =  (pn(t»*  a  (i  -  (2"«)  (x.)”*1) "  i,  (^(x.r1  <  i  (b.8) 


We  introduce  the  notation 

(2nnX]  =  a  and  (At)  =  y  (b.9) 

then  using  the  result  from  (A. 6)  in  (B.8)  we  get 

pn(t)  S  1  -  may  +  (  2  )  (ay  )  “  (  3  ]  (ay  )  if  0  <  ay  <  - 

and  m  S  3  (B.IO) 

Hence 

MTF  >f  1(1'mayn+1 +(2)(ayn+1)2  "(3  )(ay”+1)3)x  dy  (B>11) 


where 


i  dy  =  dt 


and 


yl  < 


(=) 


1  /n+1 


As  in  Appendix  A  we  evaluate  this  integral  for 

, l/n+1 


'1  =  (2=) 


and  get 
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MTF  > 


1  /  3  y/"*1  /  1  3  |  _ 1_  m-1  9 _ 1_  (m-1 )  (m-2 )  9_\ 

X  \2am/  \  n+2  2  2n+3  m  8  3n+4  2  16/ 


(B.12) 


(2n+ ^  \ 

J  and  L  =  mX  we  get 


MTF  >  f  mn/n+1 

li 


ml 


l/n+l 


1  - 


3  (m-1) (m-2)  9_\ 

+  -rt  -  -  16  i 


1^2)2  (2n+3)m8  '  (3n+4)m2 


(B.13) 


so  that  for  m  »  1 


1  ,  .  n/n+1 

MTF  >  -  K  (n)  m  ' 

L  ct 


(B.14) 


where 


3 

1/n*1  r 

3  9 

9  1 

2 /2n+i\ 

L 

2n+4  +  (2n+3)8 

(3n+4)l6 

L  I 

shown  in 

Trble  2 

for  1  <  n  <  10. 

(B.15) 
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Aerial  Measurements  Lab. 

2422  Oakton  St. 

Evanston,  Ill. 

1  Attn:  Walter  S.  Toth 

North  Carolina  Stat*  College 
Dept,  of  E.E. 

Raleigh,  N.C. 

1  Attn:  Prof.  Robert  W.  Lad* 

Univ.  of  Notre  Dam* 

Elect.  Engr.  Dept. 

South  Bend,  Indiana 
1  Attn:  Eugene  Henry 

Ohio  Stat*  University 
Dept,  of  Elect.  Engr. 

Columbus  10,  Ohio 
1  Attn:  Prof.  E.M.  Boone 

Oregon  State  Univ. 

Dept,  of  Elect.  Engr. 
Corvallis,  Oregon 
1  Attn:  H.J.  Oorthuys 

Univ.  of  Pennsylvania 
Moore  School  of  E.E. 

200  S.  34th  St. 

Philadelphia  4,  Pa. 

1  Attn:  Miss  A.L.  Campion 
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Polytechnic  Institute 
Elect.  Engr.  Dept. 

333  Jey  St. 

1  Attn:  Leonard  Shaw 

Polytechnic  Inst,  of  Brooklyn 
Graduate  Center 
Rt.  110 

Farmlngdale,  N.Y. 

1  Attn:  Librarian 

Princeton  Univ. 

Elect.  Engr.  Dept. 

Princeton,  N.J. 

1  Attn:  Prof.  F.S.  Acton 

Research  Inst,  of  Advanced 
Studies 

7213  Bel Iona  Ave. 

Baltimore,  Md. 

1  Attn:  Dr.  R.E.  Kalman 

Purdue  Univ. 

Elect.  Engr.  Dept. 

Lafayette,  Ind. 

1  Attn:  Library 

Rensselaer  Polytechnic 
Institute 

Library— Serials  Dept. 

1  Troy,-  N.Y. 

Univ.  of  Rochester 
Gavett  Hall 
River  Campus  Station 
Rochester  20,  N.Y. 

1  Attn:  Dr.  Gerald  H.  Cohen 

VARSI  Library 
(Jnlv.  of  Santa  Clara 
1  Santa  Clara,  Calif. 

Stanford  Research  Inst. 

Menlo  Park,  Calif. 

1  Attn:  External  Reports  G-037 

Stanford  Research  Inst. 
Computer  Lab. 

Menlo  Park,  Calif. 

1  Attn:  H.D.  Crane 

Syracuse  University 
Dept,  of  Elect.  Engr. 

Syracuse  10,  N.Y. 

1  Attn:  Dr.  Stanford  Goldman 

Univ.  of  Tennessee 
Dept,  of  E.E. 

Ferris  Hall 
1  Knoxville,  Tenn. 

Texas  Technological  College 
Lubbock,  Texas 

1  Attn:  Dli .  Inst,  of  Science 
Engineering,  Office  of 
Dean  of  Engr. 

Univ.  of  Utah 

Electrical  Engineering  Dept. 
Salt  Lake  City,  Utah 
1  Attn:  Richard  W.  Grow 

Villanova  Univ. 

Dept,  of  Elect,  Engr. 
Villanova,  Pa. 

1  Attn:  Thomas  C.  Gabriele, 
Aest.  Prof, 

Univ.  of  Virginia 
Charlottesville,  Va. 

1  Attn;  J.C.  Wyllie,  Alderman 
Library 


Wayne  State  University 
Detroit,  Mich. 

1  Attn:  Prof.  Harry  Josselson 
Dept,  of  Slavic  Languages 

Engineering  Library 
Yale  University 
New  Haven,  Conn. 

1  Sloane  Physics  Lab. 

1  D c-i  of  Elect.  Engr. 

1  Dunham  Lab. 

INDUSTRY 

Admiral  Corporation 
3800  Cortland  St. 

Chicago  47,  Ill. 

1  Attn:  E.N,  Roberson,  Librarian 

Airborne  Instruments  Lab. 

Comae  Road 

Deer  Park,  L.I.,  New  York 
1  Attn:  John  Dyer,  Vice  Pres, 
and  Tech.  Director 

Amperex  Corporation 
230  Duffy  Ave. 

Hlcksvllle,  L. I.,  New  York 
1  Attn:  S.  Barbasao,  ProJ.  Eng. 

Auerbach  Corp. 

1634  Arch  St. 

1  Philadelphia  3,.  Pa. 

Autonetlcs 

Div.  of  N.  American  Aviation 
9150  E.  Imperial  Highway 
Ornpiey,  Calif. 

1  Attn:  Tech.  Library  3040-3 

Bell  Telephone  Laboratories 
Murray  Hill  Labs. 

Murray  Hill,  N.J. 

1  Attn:  Dr.  J.K.  Galt 
1  Attn:  Dr.  J.  R.  Pierce 
1  Attn:  Dr.  S.  Darlington 
1  Attn:  A. J.  Grossmann 
1  Attn:  Dr.  M.  Sparks 
1  Attn:  A.  J.  Morton 
1  Attn:  Dr.  R.  M.  Ryder 

Bend lx  Corp. 

Research  Labs.  Division 
Southfield  (Detroit),  Mich. 

1  Attn:  A.G.  Pelfer 

Benson-Lehner  Corp. 

14761  California  St. 

Van  Nuys,  Calif. 

1  Attn:  George  Ryan 

Boeing  Scientific  Res.  Labs. 
P.0.  Box  3981 
Seattle  24,  Wash. 

1  Attn:  Dr.  E.J.  Nalos 

Bomac  Laboratories,  Inc. 
Beverly,  Mass. 

1  Attn:  Research  Library 

Columbia  Radiation  Lab. 

538  W.  120th  St. 

1  New  York,  N.Y. 

Conviir-San  Diego 
A  Div.  Oi  Gen.  Dynamics  Corp. 
San  Diego  12,  Calif. 

1  Attn:  Engr.  Library 
Mail  Zone  6-157 

Cook  Research  Labs. 

6401  W.  Oakton  St. 

1  Morton  Grove,  Ill. 


Cornell  Aeronautical  Lab. 

4455  Genesee  St. 

Buffalo  N.Y. 

1  Attn:  D.K.  Plummer 

2  Attn:  Library 

Eitel-McCullough,  Inc. 

301  Industrial  Way 
San  Carlos,  Calif. 

1  Attn:  Research  Librarian 
1  Attn:  W.R.  Luebke 

Electro-Optical  Instruments,  Inc. 
125  N.  Vlnedo 
Pasadena,  Calif. 

1  Attn:  I.  Welman 

Fairchild  Semiconductor  Corp. 

4001  Junlpero  Serra  Blvd. 

Palo  Alto,  Calif. 

1  Attn:  Dr.  V.H.  Grlnlch 

General  Electric  Co. 

Defense  Electronics  Div. ,  U(ED 
Cornell  Univ. 

Ithaca,  N.Y. 

1  Attn:  Library 
VIA:  Commander 

Aeronautical  Systems  Div. 
Wright -Patterson  AFB,  Ohio 
Attn:  ASRNC-5 

Donald.  £.  Lewis 

General  Electric  TWT  Product  Sect, 
601  Calif.  Ave. 

Palo  Alto,  Calif. 

1  Attn:  C.G.  Lob 
1  Attn:  Tech.  Library 

General  Electric  Co. 

Research  Lab. 

P.0.  Box  1068 
Schenectady,  N.Y. 

1  Attn:  Dr.  Philip  M.  Lewis 
1  Attn:  V.L.  Newhouse 

Applied  Physics 

General  Electric  Co. 

Electronics  Park-Bldg,  3 
Room  143-1 
Syracuse,  N.Y. 

1  Attn:  Documents  Librarian 
(Yolanda  Burke) 

General  Electric  Co. 

Schenectady  5,  N.Y. 

1  Attn:  Library,  IME  Dept. 

Bldg.  28-501 

General  Telephone  and 

Electronics  Labs.,  Inc. 
Bayside  60,  N.Y. 

1  Attn:  Louis  R.  Bloom 

Gilf Ilian  Brothers 
1815  Venice  Blvd. 

Los  Angeles,  Calif. 

1  Attn:  Engineering  Library 

Goddard  Space  Flight  Center 
Code  611 
1  Greenbelt,  Md. 

The  Hallicrafters  Co. 

5th  and  Kostner  Ave. 

1  Chicago  24,  Ill. 

Hewlett-Packard  Co. 

1501  Page  Mill  Rd. 

1  Palo  Alto,  Calif. 
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Hoffman  Electronic*  Corp. 
Semiconductor  Dlv. 

1001  Arden  Dr. 

El  Monte,  Calif. 

1  Attn:  P.N,  Ruaael,  Tech.  Dir. 

Hughe*  Aircraft  Co. 

Florence  at  Teale  St. 

Culver  City,  Calif. 

1  Attn:  Tech.  Library 

Bldg.  6,  Ra.  C2048 
1  Attn:  Solid-State  Oroup-M  107 
1  Attn:  Tech.  Doc.  Ctr. ,  Bldg.  6, 
Mali  Station  E-110 
1  Attn:  B.J.  Forman 

Antenna  Dept.,  Rea.  and 
Dev.  Lab*. 

HIB  Singer 
Science  Park 
P.0.  Box  80 
State  College,  Pa. 

1  Attn:  Tech.  Info.  Center 

Hughe*  Aircraft  Co. 

Bldg.  6,  Mall  Station  E-150 
Culver  City,  Calif. 

1  Attn:  A. 3.  Jerrema, 

Aerospace  Group 

Hughe*  Aircraft  Co. 

Semiconductor  Dlv. 

P.0.  Box  278 
Newport  Beeeh,  Calif. 

1  Attn:  Library 

Hughes  Aircraft  Co. 

Bldg.  604,  Mall  Station  C-213 
Fullerton,  Calif. 

1  Attn:  A.  Eachner,  Jr. 

Ground  Systems  Group 

Hughes  Aircraft  Co. 

3011  Malibu  Canyon  Rd. 

Malibu,  Calif. 

1  Attn:  H.A.  lams,  Res.  Lab. 

International  Businas*  Machines 
Product  Development  Lab. 
Poughkeepsie,  N.Y, 

1  Attn:  E.M.  D.vl.  -  (lJ.pt.  362) 

International  Business  Machines 
Data  Systems  Dlv. 

Box  390,  Board man  Rd. 
Poughkeepsie,  N.Y. 

1  Attn:  J.C.  Logue 

IBM  Research  Library 
Box  218 

1  Yorktown  Heights,  N.Y. 

International  Business  Machines 
San  Jose,  California 
1  Attn:  Majorle  Griffin 

ITT  Federal  Labs. 

500  Washington  Ave. 

Nut ley,  N.J. 

1  Attn:  Librarian,  Ellis  Mount 

Lab.  for  Electronics,  Inc, 

1079  Coaamnwealth  Ave. 

Boston  15,  Mass. 

1  Attn:  Dr.  H.  Fuller 
1  Attn:  Library 

LEL,  Inc. 

75  Akron  St. 

Coplague,  L.I.,  N.Y. 

1  Attn:  Robert  S.  Mautner 


Lenkurt  Electric  Co. 

8an  Carlos,  Calif. 

1  Attn:  M.L.  Waller,  Librarian 

Llbrascope,  Dlv.  of  General 
Precision,  Inc. 

808  Western  Ave. 

Glendale  1,  Calif. 

1  Attn:  Engineering  Library 

Lockheed  Missile  and  Space  Co. 
Dept.  87-33,  Bldg.  324 
P.0.  Box  504 
Sunnyvale,  Calif. 

1  Attn:  G.W.  Price 

Lockheed  Missile  and  Space  Co. 
Dept.  87-34,  Bldg.  520 
P.O.  Box  504 
Sunnyvale,  Calif. 

1  Attn:  Dr.  W.M.  Harris,  Dev't. 
Planning  Staff 

Lockheed  Missiles  &  Space  Co. 
Rm.  59-34,  Bldg.  102 
P.O.  Box  504 
Sunnyvale,  Calif. 

1  Attn:  Stephent  Paine 

Lockheed  Missile  Systems  Co. 
Sunnyvale,  Calif, 

1  Attn:  Tech.  Info.  Ctr.  50-14 

Lockheed  Missile  and  Space  Co. 
Palo  Alto,  Calif. 

1  Attn:  M.E.  Browne-Dept.  52-40 
Bldg.  202 

The  Martin  Co. 

P.O.  Box  5837 
Orlando,  Florida 
1  Attn:  Engr.  Library  M.P.  30 

Marquardt  Aircraft  Corp. 

16555  Saticoy  St. 

P.O.  Box  2013,  -South  Annex 
Van  Nuya,  Calif. 

1  Attn:  Dr.  Basun  Change 
Research  Scientist 

Mauchley  Associates 
50  E.  Butler 
1  Ampler,  Pennsylvania 

Melpar,  Incorporated 
Applied  Science  Dlv. 

3000  Arlington  Blvd. 

Falls  Church,  Va. 

1  Attn:  Librarian 

Micro  State  Electronics  Corp. 

1  Attn:  A.L.  Kestenbaum 
152  Floral  Ave. 

Murray  Hill,  N.J. 

Microwave  /.ssoc . ,  Inc. 

North  West  Industrial  Park 
Burlington,  Mass. 

1  Attn:  Dr.  Kenneth  Mortenson 
1  Attn:  Librarian 

Microwave  Electronics  Corp. 

3165  Porter  Drive 
Palo  Alto,  Calif. 

1  Attn:  Stanley  F.  Kalsel 
1  Attn:  M.C.  Long 

Minneapolls-Honeywell  Regulator 
Company 

Semiconductor  Library 
1177  Blue  Heron  Blvd. 

Riviera  Beach,  Florida 

The  Mitre  Corporation 
Bedford,  Mass. 

1  Attn:  Library 


Monsanto  Chemioal  Co. 

800  K.  Lindbergh  Blvd, 

St.  Louis  66,  Mo. 

1  Attn:  Edward  Orban,  Mgr. 

Inorganic  Development 

Motorola,  Semiconductor  Prod.  Dlv. 
5005  E.  McDowell  Rd. 

Phoenix,  Aria. 

1  Attn:  Dr.  A,  Leak 
1  Attn:  Peter  B,  Myers 

Motorola,  Inc. 

8330  Indiana  Ave. 

Riverside,  Calif. 

1  Attn:  R.E.  Freese 

Tech.  Info.  Analyst 

Net'l  Biomedical  Inst. 

8600  16th  8t. 

Silver  Spring,  Md. 

1  Attn:  Dr.  R.S.  Led ley 

Nortronlcs 

Palos  Verdes  Research  Park 
6101  Crest  Rd. 

Palos  Verdes  Estates,  Calif. 

1  Attn:  Technical  Info.  Agency 

Pacific  Semiconductors,  Inc, 

14520  S.  Aviation  Blvd. 

Lawndale,  Calif. 

1  Attn:  H. Q.  North 

Dr.  Alex  Mayer,  Ass't  Dir. 

Applied  Res.  Lab. 

Philco  WDL 
3875  Fabian  Way 
1  Palo  Alto,  Calif. 

Philco  Corp. 

Tech.  Rep.  Dlv. 

P.O.  Box  4730 
Philadelphia  34,  Pa. 

1  Attn:  F.R.  Sherman,  Mgr.  Editor 
Philco  Tech.  Rep.  Div. 

BULLETIN 

Philco  Corp. 

Lansdale  Dlv. 

Church  Rd. 

Lansdale,  Pa. 

1  Attn:  John  R.  Gordon 

Philco  Scientific  Lab. 

Blue  Bell,  Pa. 

1  Attn:  Dr.  J.R.  Feldmeier, 

Assoc.  Dir.  of  Research 
1  Attn:  C.V.  Bncclarelll 
1  Attn:  C.T.  McCoy,  Res.  Advisor 

Polarad  Electronics  Corp. 

43-20  Thirty-Fourth  St. 

Long  Island  City  1,  N.Y. 

1  Attn:  A.H.  Sonnenschein 

Ass't  to  the  President 

RCA,  Surf.  Comm.  Dlv. 

Front  and  Market  Streets 
Bldg.  17-C-6 
Camden,  N.J. 

1  Attn:  K.K.  Miller,  Mgr. 

Mlnuteman  Project  Of. 

RCA  Labs. 

Princeton,  N.J. 

1  Attn:  Harwick  Johnson 
1  Attn:  Dr.  W.M.  Webster 

RCA 

Bldg. ,  108-134 
Moores town,  N.J. 

1  Attn:  H.J.  Schrader 
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The  Rand  Corp. 

1700  Main  St. 

Santa  Monica,  Calif. 

1  Attn:  Lib.,  Helen  J,  Waldron 
1  Attn:  Computer  Science  Dept. 
Willia  H.  Ware 

Raytheon  Co. 

Microwave  and  Power  Tube  Dlv. 
Spencer  Lab. 

Burlington,  Maaa. 

1  Attn:  Librarian 

Raytheon  Manufacturing  Co. 

28  Seyon  St. 

Research  Div. 

Waltham,  Mass. 

1  Attn:  Dr.  Herman  Statz 
1  Attn:  Librarian 

Raytheon  Corp. 

Waltham,  Maas. 

1  Attn:  Dr.  H.  Scharfman 

Roger  White  Electron  Devices, 
Inc. 

Tall  Oaks  Rd,  Laurel  Ledgea 

1  Stamford ,  Conn . 

Space  Technology  Labs,  Inc. 

One  Space  Park 
Redondo  Beach,  Calif. 

2  Attn:  Tech.  Library 

Doc.  Acquisitions 

Space  Tech.  Labs.,  Inc. 

Physical  Research  Lab. 

P.0.  Box  95002 

Los  Angeles  45,  Calif. 

I  Attn:  D.  Fladlein 

Sperry  Gyroscope  Company 
Div.  of  Sperry  Rand  Corp. 

Great  Neck,  N.Y. 

1  Attn:  Leonard  Swern  (M.S.3T105) 

Sperry  Microwave  Electronics  Co. 
Clearwater,  Florida 
1  Attn:  John  E.  Pippin, 

Res.  Section  Head 

Sperry  Electron  Tube  Div. 

Sperry  Rand  Corp. 

1  Gainesville,  Florida 

Sylvanla  Electronic  Defense  Lab. 
P.0.  Box  205 
1  Mountain  View,  Calif. 

Sylvanla  Electric  Products,  Inc. 
500  Evelyn  Ave. 

1  Mt.  View,  Calif. 

Sylvanla  Electronics  System 
Waltham  Labs. 

100  First  Ave. 

Waltham  54,  Mass. 

1  Attn:  Librarian 
1  Attn:  Ernest  E.  Hollis 

Technical  Research  Group 
1  Syosset,  Long  Island,  N.Y. 


Texas  Instruments  Incorporated 
Apparatus  Dlv. 

P.0.  Box  6015 
Dallas  22,  Texas 
1  Attn:  M.E.  Chun 


Texas  Instruments,  Inc. 
Semiconductor-Components  Div. 

P.0.  Box  5012 
Dallas  22,  Texas 

1  Attn:  Semiconductor  Components 
Library 

1  Attn:  Dr.  Willis  A.  Adcock, 

Mgr.  Integrated  Circuits 
Components  Div. 

Texas  Instruments  Inc. 

Corporate  Res.  and  B»gr. 

Technical  Reports  Service 
P.0.  Box  5474 
1  Dallas  22,  Texas 

Tektronix,  Inc. 

P.0.  Box  500 
Beaverton,  Oregon 
4  Attn:  Dr.  Jean  F.  Delord 
Dir.  of  Research 

Transitron  Electronic  Corp. 

144  Addison  St, 

East  Boston,  Mass. 

1  Attn:  Dr.  H.G.  Rudenberg,  Dir. 

R  and  D 

Varian  Associates 
611  Hansen  Way 
Palo  Alto,  Calif. 

1  Attn:  Tech.  Library 

Westinghouse  Electric  Corp. 
Friendship  Internet* 1  Airport 
Box  746,  Baltimore  3,  Md. 

1  Attn:  G.  Ross  Kilgore,  Mgr. 

Applied  Research  Dept. 
Baltimore  Laboratory 

Westinghouse  Electric  Corp. 

Beulah  Rd. 

Pittsburgh  35,  Pa. 

1  Attn:  Dr.  G.C.  SzJklal 

Melbourne  J.  Hellstrom,  Supv.  Engr. 
Westinghouse  Electronics  Corp. 
Molecular  Electronics  Dlv. 

Box  1836 

1  Baltimore,  Md.  21203 

Westinghouse  Electric  Corp. 
Research  Laboratories 
Beulah  Rd.,  Churchill  Boro 
Pittsburg  35,  Pa. 

1  Attn:  J.G.  Castle,  Jr. -401-1B5 
1  Attn:  Solid  State  Dept. 

1  Attn:  R.E.  Davis 


Zenith  Radio  Corporation 
6001  Dickens  Ave. 

Chicago  39,  Ill. 

1  Attn:  Joseph  Marl-.ln 


Solid  State 
-  8  -  3/84 


FOREIGN  RECIPENTS 


Northern  Electric  Co. ,  Ltd. 

Ret,  and  Dev't  Labi. 

**P.O.  Box  3511,  Station  MC" 

1  Ottawa,  CANADA 

University  of  Ottawa 
Dept,  of  Electrical  Engr. 

♦♦Ottawa  2,  CANADA 
1  Attn:  G.  S.  Olintky 

Via:  ASD,  Foreign  Release  of. 

(asy>  ) 

Wright-Pat  tenon  AFB, 

Ohio 

Attn:  J.  Troyan 

Dr.  Sidney  V.  Soanea 
Research  Dept. 

Ferranti-Packard  Elect.  Ltd. 
♦♦Industry  St. 

1  Toronto  15.  Ontario,  CANADA 

Central  Electronics  Engr. 

Research  Institute 

*  Pilani,  Rajasthan,  INDIA 
1  Attn:  Omp.  Gandhi 

Prof.  Sanal  Ml to 
Dept,  of  Applied  Physics 
Faculty  of  Engineering 
Osaka  City  University 

♦  12  Nlshl-Og loach 1,  Kitaku 
1  Osaka,  JAPAN 

Prof.  Jose  M.  Borrego 
Centro  de  Invest lgacion  Y  de 
Estudlos 

Avar ados  Del  Instltuto  Politecnioo 
Nacional 

♦♦Apartado  Postal  26740 
1  Mexico  14,  D.E. 

Prof.  E.H.  Rhoderick 
♦♦Manchester  College  of  Science 
and  Tech. 

1  Manchester  1,  ENGLAND 

Mr.  Helkkl  Ihantola 
♦♦Fiskars  Electronics  Lab. 

1  Eliaaenkatu  17,  Helsinki, 

FINLAND 

Prof.  Takuo  Sugano 
Faculty  of  Engineering 
University  of  Tokyo 
Bunkyo-ku,  Tokyo 
1  JAPAN 

Dr.  Niels  I.  Meyer 
Physics  Dept. 

The  Technical  University 
of  Denaark 

Lund toft eve J  100,  Lyngby 
1  DENMARK 

Prof.  G.  Bruun 
Royal  Technical  University 
of  Denmark 
Ostervolgade  10,  G. 

1  Copenhagen  K,  DENMARK 

Dr.  Georges  Alon 
E.N.S.  Labors toire  des 
Hautes  Energies 
Orsay/Seine  et  Oise 
1  B.P.  No.  2,  FRANCE 


Dr.  P.  A.  Tove 
Fysiaka  Inst i tut ionen 
Uppaala  University 
1  Uppsala,  SWEDEN 

Prof.  W.  E.  Dahlke 
Telef unken,  GmbH 
Sof linger  Strasae  100 
Postfach  627 
Ula/Donau 
1  GERMANY 

Dr.  G.  B.  B.  Chaplin 
The  Plessey  Company 
(u.  K.  )  Ltd. 

Caswell,  Towcester 
1  Northants,  ENGLAND 

Dr.  D.  H.  Roberts 
The  Plessey  Company 
(U.K. )  Ltd. 

Caswell,  Towcester 
1  Northants,  ENGLAND 

Royal  Radar  Establishment 
Physics  Dept. 

St.  Andrews  Rd. 

Great  Malvern,  Worcs. 

ENGLAND 

1  Attn:  Dr.  P.  N.  Butcher 

National  Physical  Lab. 
Teddlngton,  Middlesex 
ENGLAND 

1  Attn:  Dr.  A.  M.  Uttley 

Swiss  Federal  Institute  of 
Technology 
Glorlastrasse  35 
Zurich,  SWITZERLAND 
1  Attn:  Prof.  M.J.O.  Strutt 

Prof.  A.  Be bock 
University  of  Louvain 
Institute  of  Physique 
61  Rue  de  Namur 
Louvain,  Belglua 

Dr.  Maurice  Bernard 

Dept.  PCM 

CNET 

Isay-Les-Moulineaux 
Seine,  FRANCE 

1  Attn:  Solid-State  and  Electron 
Devices 

Prof.  Karl  Stalnbuch 
Institute  fur  Nachrichtenver- 
arbeltung  und 
Nachrichtenubertragung 
Techniache  Hochschule  Karlsruhe 
1  Karlsruhe,  GERMANY 


♦  ONR  44  Reports  ONLY 
**  AF  26  Reports  ONLY 

VIA:  ASD,  Poraign  Relaase 
Offic.  (ASY7) 

Wright -Patterson  AFB 
Ohio 

Attn:  J.  Troyan 
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